onetouch17.info/pop-go/44528
302 Found 0 B URL HTTP/1.1 onetouch17.info/pop-go/44528
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pop-go/44528 HTTP/1.1
Host: onetouch17.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Wed, 22 Feb 2023 13:08:59 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Referrer-Policy: no-referrer
Location: https://wait4min.com/yX5n98X9?source=44528&sub_id_1=pops
Set-Cookie: pop-u-uni-ddb82f=96fda78722ddfdf2e4216e06b33701e8a%3A2%3A%7Bi%3A0%3Bs%3A16%3A%22pop-u-uni-ddb82f%22%3Bi%3A1%3Bs%3A2%3A%22no%22%3B%7D; expires=Thu, 23-Feb-2023 13:08:59 GMT; Max-Age=86400; path=/; HttpOnly
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mat5Q914TyDq24NqS7aY2Uol128WL%2BQpaE313Opexl88xtfrLATneT4MprZxtcqE1Xj4ZWvvRXisKvmuT2DKMftI%2FOV%2FLQvts9kaLPN7m%2FRqBPZsDasmnpR%2F8OQgqTBgszA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 79d7f4220c848885-LHR
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 13d4983fb8a0ee2cb855663cc9d8f6a0
1f85fc46435f86d7f414e310670c9afe27ea9532
f4bc8150273c4fc6e90c9df8e074823a78dc8409bfcc00616265e24d7d663498
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F4BC8150273C4FC6E90C9DF8E074823A78DC8409BFCC00616265E24D7D663498"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3394
Expires: Wed, 22 Feb 2023 14:05:34 GMT
Date: Wed, 22 Feb 2023 13:09:00 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 03ba1c19530391f28dcb5c049ab66e99
a1b89c652e5406b1981704d1973ac1c820ec584d
9c78f93d5d5c96391e480ecad78b4a6a30fb33fdc61acc7799fe3401c62a1292
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C78F93D5D5C96391E480ECAD78B4A6A30FB33FDC61ACC7799FE3401C62A1292"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9638
Expires: Wed, 22 Feb 2023 15:49:38 GMT
Date: Wed, 22 Feb 2023 13:09:00 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 22 Feb 2023 12:38:15 GMT
content-type: application/json
age: 1845
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48b5fafb12e15fbede4669b549518d50
ee82e527d3c45ebbc1865cd56b93e1be5ac933db
94036245b7831c01d3112f661bd909369c9b3af89ab37be7fb07f2254a7df7d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94036245B7831C01D3112F661BD909369C9B3AF89AB37BE7FB07F2254A7DF7D5"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2695
Expires: Wed, 22 Feb 2023 13:53:55 GMT
Date: Wed, 22 Feb 2023 13:09:00 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 8rzllgGnKtwt12O22uxWgIOJ6emDYe1UPXPZuvrnIeqrF7bp9NlWd171KVElYqh2E9DWvbBvdXk=
x-amz-request-id: G17BWX01T32JNVHS
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
via: 1.1 google
date: Wed, 22 Feb 2023 12:53:26 GMT
age: 934
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
content-length: 5348
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 0d7f4212bd7587839ad76c58cb345ec0
270d9bf48254a49c390f174f95b29c4f4bc48d7d
75aecd891ffef31707ae14041f88472888bfc191aa7cda1cc23f20f89203e1a6
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "75AECD891FFEF31707AE14041F88472888BFC191AA7CDA1CC23F20F89203E1A6"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1842
Expires: Wed, 22 Feb 2023 13:39:42 GMT
Date: Wed, 22 Feb 2023 13:09:00 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 22 Feb 2023 13:09:00 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 0d7f4212bd7587839ad76c58cb345ec0
270d9bf48254a49c390f174f95b29c4f4bc48d7d
75aecd891ffef31707ae14041f88472888bfc191aa7cda1cc23f20f89203e1a6
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "75AECD891FFEF31707AE14041F88472888BFC191AA7CDA1CC23F20F89203E1A6"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1842
Expires: Wed, 22 Feb 2023 13:39:42 GMT
Date: Wed, 22 Feb 2023 13:09:00 GMT
Connection: keep-alive
ocsp.buypass.com/
200 OK 1.7 kB IP
ASN #20940 Akamai International B.V.
Hash 213f63e90a65ca00f9d887c45f5ca034
f399e9742d892a72eaf246e01fe07d5bd949317c
83fb9c95113b8759391f2cdbc9965f1a8d8bb91fb95b7eab9339eb15a8737ad0
POST / HTTP/1.1
Host: ocsp.buypass.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 78
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Access-Control-Allow-Origin: https://www.buypass.no
Access-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With,Content-Length,Accept,Origin,X-Buypass-Session-Id,X-Buypass-Locale
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
MDC-correlationId: 23e9f761-6546-4537-8535-cd7ef0e88a91
Content-Length: 1701
Date: Wed, 22 Feb 2023 13:09:00 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Last-Modified, Alert, Backoff, Content-Type, Pragma, Expires, Cache-Control, Retry-After, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 22 Feb 2023 12:51:26 GMT
age: 1054
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aea9630f88377d01e5cebab9de9c3b89
18c6603c6e63b79d45031e960dddd31b227f0de5
853e5bb59efe99054d86bbacf7c2f1f2483ad9c05d35cc9d8ea5dd9909cb38fb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "853E5BB59EFE99054D86BBACF7C2F1F2483AD9C05D35CC9D8EA5DD9909CB38FB"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17615
Expires: Wed, 22 Feb 2023 18:02:35 GMT
Date: Wed, 22 Feb 2023 13:09:00 GMT
Connection: keep-alive
pasbstbovc.com/dupa.gif?z=1958161&var=44528&ymid=clickid&pb=36dcc859435335e188453673f985d8021677078540&psp=olPyGO-DXF8jKJIVz3aHe1J3YUPndDu6fSYoTFJscoSzUyQVXvdD7G_WMbj7lFpbUv-nl_UXHsEpzetwaEnVQB5zYqs7DOSlym01U5KDl5KKsAS82DYFUwM1f5faO-p1Qqh4z4XRoJOSIHQLI_ZlVV-H4r7vFAUlRleC5nw_Hql0PIbo6PLPqz5zTQLnmMsyoz7_H0FBGDWww_Gm059GKRK1rEcwgpTimXGUBEie8rGY6A83wsCRO6dwIgvW1V8W3XtY20Hp5VPC55H0-Wl-GKz_nEetl6Codx0fkUD_X7b-EJnBhhOQwh_CwafwqEnsnLmZdHKlmhpljbH-t7U5h4Q_wn2Vjo4apn-_vVPqGg2fhavq6NmzrMzxo9WJGOQw1Uc61pEHrwaYcy83wt2SlqtSqQhgjAdidfnAnB42xF1BXKUGAK2ruR9-Z8bEh9gTdhWY1ILOEQDsOKSw5KMrtYtFsF6PAJQGwio36lM3EUk33repX-W8n7y_a2Q0e_MqpC5RhmqZNvcorIla3_T_7ve2ZDDFPmoCIJyNigItrrt3RSsERTAdhb1RhSezGYBxVrDHxCct85NBgqCkIWtxPcocQp6urIM9z41F9eqsHxuSetpY5l-8pzm0z8cel15KoQqbUg4-MFBGCZXJ5M1-SHctBPHEBycVcR9nVxAOhwoNaiO-_TYRDvUXHouoFl4QQr5WBW2b4s7a&abvar=0&pload=56&rlp=%5B0%2C0%2C0%2C0%2C0%2C0%2C24%2C0%5D
200 OK 43 B URL HTTP/2 pasbstbovc.com/dupa.gif?z=1958161&var=44528&ymid=clickid&pb=36dcc859435335e188453673f985d8021677078540&psp=olPyGO-DXF8jKJIVz3aHe1J3YUPndDu6fSYoTFJscoSzUyQVXvdD7G_WMbj7lFpbUv-nl_UXHsEpzetwaEnVQB5zYqs7DOSlym01U5KDl5KKsAS82DYFUwM1f5faO-p1Qqh4z4XRoJOSIHQLI_ZlVV-H4r7vFAUlRleC5nw_Hql0PIbo6PLPqz5zTQLnmMsyoz7_H0FBGDWww_Gm059GKRK1rEcwgpTimXGUBEie8rGY6A83wsCRO6dwIgvW1V8W3XtY20Hp5VPC55H0-Wl-GKz_nEetl6Codx0fkUD_X7b-EJnBhhOQwh_CwafwqEnsnLmZdHKlmhpljbH-t7U5h4Q_wn2Vjo4apn-_vVPqGg2fhavq6NmzrMzxo9WJGOQw1Uc61pEHrwaYcy83wt2SlqtSqQhgjAdidfnAnB42xF1BXKUGAK2ruR9-Z8bEh9gTdhWY1ILOEQDsOKSw5KMrtYtFsF6PAJQGwio36lM3EUk33repX-W8n7y_a2Q0e_MqpC5RhmqZNvcorIla3_T_7ve2ZDDFPmoCIJyNigItrrt3RSsERTAdhb1RhSezGYBxVrDHxCct85NBgqCkIWtxPcocQp6urIM9z41F9eqsHxuSetpY5l-8pzm0z8cel15KoQqbUg4-MFBGCZXJ5M1-SHctBPHEBycVcR9nVxAOhwoNaiO-_TYRDvUXHouoFl4QQr5WBW2b4s7a&abvar=0&pload=56&rlp=%5B0%2C0%2C0%2C0%2C0%2C0%2C24%2C0%5D
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
POST /dupa.gif?z=1958161&var=44528&ymid=clickid&pb=36dcc859435335e188453673f985d8021677078540&psp=olPyGO-DXF8jKJIVz3aHe1J3YUPndDu6fSYoTFJscoSzUyQVXvdD7G_WMbj7lFpbUv-nl_UXHsEpzetwaEnVQB5zYqs7DOSlym01U5KDl5KKsAS82DYFUwM1f5faO-p1Qqh4z4XRoJOSIHQLI_ZlVV-H4r7vFAUlRleC5nw_Hql0PIbo6PLPqz5zTQLnmMsyoz7_H0FBGDWww_Gm059GKRK1rEcwgpTimXGUBEie8rGY6A83wsCRO6dwIgvW1V8W3XtY20Hp5VPC55H0-Wl-GKz_nEetl6Codx0fkUD_X7b-EJnBhhOQwh_CwafwqEnsnLmZdHKlmhpljbH-t7U5h4Q_wn2Vjo4apn-_vVPqGg2fhavq6NmzrMzxo9WJGOQw1Uc61pEHrwaYcy83wt2SlqtSqQhgjAdidfnAnB42xF1BXKUGAK2ruR9-Z8bEh9gTdhWY1ILOEQDsOKSw5KMrtYtFsF6PAJQGwio36lM3EUk33repX-W8n7y_a2Q0e_MqpC5RhmqZNvcorIla3_T_7ve2ZDDFPmoCIJyNigItrrt3RSsERTAdhb1RhSezGYBxVrDHxCct85NBgqCkIWtxPcocQp6urIM9z41F9eqsHxuSetpY5l-8pzm0z8cel15KoQqbUg4-MFBGCZXJ5M1-SHctBPHEBycVcR9nVxAOhwoNaiO-_TYRDvUXHouoFl4QQr5WBW2b4s7a&abvar=0&pload=56&rlp=%5B0%2C0%2C0%2C0%2C0%2C0%2C24%2C0%5D HTTP/1.1
Host: pasbstbovc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Cookie: UID=23022208095de5ce0738484da586fc611635; OACCAP=ACUpeQAAAAAAAAAB; OACBLOCK=ACUpeQAAAABj9aFQ; OXCCLK=ACUpeQAAAAAAAAAB; OXPCLK=AAJN7wAAAAAAAAAB; ppucnt=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Feb 2023 13:09:00 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.redirect-pixel
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
ak.phumpauk.com/4/5689834
200 OK 9.2 kB URL HTTP/2 ak.phumpauk.com/4/5689834
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (12966)
Hash 3383be8e2f94e158286b56fc0ed92f62
e6bf00e85cf583b77c63285fa4ee4253d5c8ca95
6acb6a1fa16eef2338a612e8f7c339e537d0efcd875c47b4e164bac224765c86
Analyzer Verdict Alert quad9 Sinkholed
GET /4/5689834 HTTP/1.1
Host: ak.phumpauk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf8
x-trace-id: 0729c8fcb0570798ab012cba8c0b0a25
link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch"
access-control-allow-credentials: true
access-control-max-age: 86400
timing-allow-origin: *
access-control-allow-origin: *, *
access-control-allow-methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Accept, Content-Type, Content-Length, Accept-Encoding
content-encoding: gzip
expires: Wed, 22 Feb 2023 13:09:01 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 22 Feb 2023 13:09:01 GMT
content-length: 9206
vary: Accept-Encoding
set-cookie: OAID=90791f1c05dc43fb8d68f050078ffc04; expires=Thu, 22 Feb 2024 13:09:01 GMT; path=/; secure; SameSite=None
oaidts=1677071341; expires=Thu, 22 Feb 2024 13:09:01 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fTsq2svKsF9bWDIaVNIfnA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zmZ6HTND6Y0Zi/Rt/WL8QQGIVuo=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e92b7bb852b13b70a76783a804899232
7d49184483e5e2a8da350f23995917edfc0b747e
8bc7dc3017eec85ade72f43708e99aefe122941f3f81753186898fa6757d6d40
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8BC7DC3017EEC85ADE72F43708E99AEFE122941F3F81753186898FA6757D6D40"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7491
Expires: Wed, 22 Feb 2023 15:13:52 GMT
Date: Wed, 22 Feb 2023 13:09:01 GMT
Connection: keep-alive
my.rtmark.net/img.gif?f=merge&userId=90791f1c05dc43fb8d68f050078ffc04
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=90791f1c05dc43fb8d68f050078ffc04
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=merge&userId=90791f1c05dc43fb8d68f050078ffc04 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ak.phumpauk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 22 Feb 2023 13:09:01 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=90791f1c05dc43fb8d68f050078ffc04; expires=Thu, 22 Feb 2024 13:09:01 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 957597c83ee8ff2c6f7df023b6588ed7
4c2d5ca958895662a7799be5af0c59356bcadcb3
69e6cac44620c1ad76ddd94c8ecf90eacfb00d5337bafd8c3fdbe2327ae4e547
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 13:09:01 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 20 Feb 2023 02:07:09 GMT
Expires: Mon, 27 Feb 2023 02:07:08 GMT
Etag: "4c2d5ca958895662a7799be5af0c59356bcadcb3"
Cache-Control: max-age=391686,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79d7f42c387bb4fd-OSL
ak.phumpauk.com/?z=5689834&syncedCookie=true&rhd=false
302 Found 0 B URL HTTP/2 ak.phumpauk.com/?z=5689834&syncedCookie=true&rhd=false
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /?z=5689834&syncedCookie=true&rhd=false HTTP/1.1
Host: ak.phumpauk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 441
Origin: https://ak.phumpauk.com
Connection: keep-alive
Referer: https://ak.phumpauk.com/afu.php?zoneid=5689834&var=5689834&rid=XXz4jyvWNyEJSqRKY8d18w%3D%3D&rhd=false
Cookie: OAID=90791f1c05dc43fb8d68f050078ffc04; oaidts=1677071341
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
content-length: 0
x-trace-id: c8742dbf43aa01023b2970f9d518903f
link: <https://tracker.selectivv.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
referrer-policy: no-referrer
location: https://tracker.selectivv.com/637fb0f9010e700001e597f3?sub1=5689834&sub2=6135985&sub3=15009606&sub4=firefox&sub5=windows&sub6=NO&sub7=03&sub8=blix group as&sub9=desktop&sub10=broadband&ref_id=652247082023006350&cost=0.000455&rdk=rk3
access-control-allow-origin: https://ak.phumpauk.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
expires: Wed, 22 Feb 2023 13:09:01 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 22 Feb 2023 13:09:01 GMT
set-cookie: OAID=90791f1c05dc43fb8d68f050078ffc04; expires=Thu, 22 Feb 2024 13:09:01 GMT; path=/; secure; SameSite=None
oaidts=1677071341; expires=Thu, 22 Feb 2024 13:09:01 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Wed, 01 Mar 2023 13:09:01 GMT; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 62b94c4c909fae40d2ac24eb89183aee
a7fd0d2a00a01b3702ad6be4bd434ae5aa4cd931
0c989a2b31ea27342cf87dcdd448d19d2f950407518f478f3fa1a6654c259ece
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 13:09:02 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 20 Feb 2023 00:02:11 GMT
Expires: Mon, 27 Feb 2023 00:02:10 GMT
Etag: "a7fd0d2a00a01b3702ad6be4bd434ae5aa4cd931"
Cache-Control: max-age=384188,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79d7f42e6db0b50c-OSL
tracker.selectivv.com/637fb0f9010e700001e597f3?sub1=5689834&sub2=6135985&sub3=15009606&sub4=firefox&sub5=windows&sub6=NO&sub7=03&sub8=blix%20group%20as&sub9=desktop&sub10=broadband&ref_id=652247082023006350&cost=0.000455&rdk=rk3
302 Found 283 B URL HTTP/1.1 tracker.selectivv.com/637fb0f9010e700001e597f3?sub1=5689834&sub2=6135985&sub3=15009606&sub4=firefox&sub5=windows&sub6=NO&sub7=03&sub8=blix%20group%20as&sub9=desktop&sub10=broadband&ref_id=652247082023006350&cost=0.000455&rdk=rk3
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document, ASCII text
Hash f1b1f24c8089625998134430c9b1ae08
0fff89bbdebc1be424911e79d7bb5ac970e60021
932ad024ba99f7467cb3efa4535b5485aebb52c4a0ee0f6d7fd89d45c4d3b834
GET /637fb0f9010e700001e597f3?sub1=5689834&sub2=6135985&sub3=15009606&sub4=firefox&sub5=windows&sub6=NO&sub7=03&sub8=blix%20group%20as&sub9=desktop&sub10=broadband&ref_id=652247082023006350&cost=0.000455&rdk=rk3 HTTP/1.1
Host: tracker.selectivv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.20.2
Date: Wed, 22 Feb 2023 13:09:02 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 283
Connection: keep-alive
Location: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=CNOR4001CAO0223HNL1PRGDUT&utm_term=P5&user_id=63f613eef8d65f0001b92a0c&cmpid=637fb0f9010e700001e597f3&rtkcid=63f613eef8d65f0001b92a0c
Set-Cookie: redcmps=W3siaWQiOiI2MzdmYjBmOTAxMGU3MDAwMDFlNTk3ZjMiLCJ0IjoiMjAyMy0wMi0yMlQxMzowOTowMi4wMzU0NTgxOTZaIn1d; Path=/; Domain=tracker.selectivv.com; Expires=Thu, 23 Feb 2023 13:09:02 GMT; Secure; SameSite=None
redhash=NjNmNjEzZWVmOGQ2NWYwMDAxYjkyYTBjfDB8NjM3ZmIwZjkwMTBlNzAwMDAxZTU5N2YzfHw3OGZlYzllZC00ZGNjLTRhYmItOWI0Yy04ZmUzYzRiNTQyYzl8MTY3NzA3MTM0Mg==; Path=/; Domain=tracker.selectivv.com; Expires=Thu, 22 Feb 2024 13:09:02 GMT; Secure; SameSite=None
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
ocsp.netsolssl.com/
200 OK 471 B IP
Hash 4ad84cc4bfc24dcf322f385fcabcad0b
07a248916861667f08172aebe5438c2e8276a406
97f379b6e1d46e83c5f927b51436e59c0c49af3b257810de8baef05eb1059ac1
POST / HTTP/1.1
Host: ocsp.netsolssl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 13:09:02 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 19 Feb 2023 19:44:03 GMT
Expires: Sun, 26 Feb 2023 19:44:02 GMT
Etag: "07a248916861667f08172aebe5438c2e8276a406"
Cache-Control: max-age=368699,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79d7f430fc531bfe-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 29675b43fa4a5609baa371c2449bfaf8
938fb69ea5d808388521b237e813f54ad2c1ec51
108b6420ad8473bb4150630466153daae7f70ca3b3eda9258e6e0c8d59cbfe3c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "108B6420AD8473BB4150630466153DAAE7F70CA3B3EDA9258E6E0C8D59CBFE3C"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19974
Expires: Wed, 22 Feb 2023 18:41:56 GMT
Date: Wed, 22 Feb 2023 13:09:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 29675b43fa4a5609baa371c2449bfaf8
938fb69ea5d808388521b237e813f54ad2c1ec51
108b6420ad8473bb4150630466153daae7f70ca3b3eda9258e6e0c8d59cbfe3c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "108B6420AD8473BB4150630466153DAAE7F70CA3B3EDA9258E6E0C8D59CBFE3C"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19974
Expires: Wed, 22 Feb 2023 18:41:56 GMT
Date: Wed, 22 Feb 2023 13:09:02 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 29675b43fa4a5609baa371c2449bfaf8
938fb69ea5d808388521b237e813f54ad2c1ec51
108b6420ad8473bb4150630466153daae7f70ca3b3eda9258e6e0c8d59cbfe3c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "108B6420AD8473BB4150630466153DAAE7F70CA3B3EDA9258E6E0C8D59CBFE3C"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19974
Expires: Wed, 22 Feb 2023 18:41:56 GMT
Date: Wed, 22 Feb 2023 13:09:02 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee9e84a3-48df-4ae0-b1d5-e30575bc3a21.jpeg
200 OK 3.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee9e84a3-48df-4ae0-b1d5-e30575bc3a21.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 72c6a04a8a644dee34ecaa4e19889509
74f0dda2be17492159c90388af184bddfa167286
7a68870a33f5183e2a4a626b37a62447189b75bb994fc31ecddedf22b2071443
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee9e84a3-48df-4ae0-b1d5-e30575bc3a21.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3867
x-amzn-requestid: 3996beea-e073-4e1a-9d05-d074fe36f0cf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtW1QFUfIAMFW0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f53821-6245c8fd3884483f7b56ed99;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:31:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: p-QtIMCpJZ-eo2Lk2uMjCO0sEpXNoZJg5kt3lzTO7_QcV68mBvgdsA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Feb 2023 21:48:26 GMT
age: 55236
etag: "74f0dda2be17492159c90388af184bddfa167286"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47ffc84c-58b5-4b2d-aaad-fa9eb8d64e12.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47ffc84c-58b5-4b2d-aaad-fa9eb8d64e12.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash efa78692616f5de76c2e2a854d57c771
1d421500bf863c96a8c3a6043cc484dfa13d9cfe
f6c479ba006b2a3cb824d4df10509def9aa53f33f4ee222aa5a7be9f6f80f870
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47ffc84c-58b5-4b2d-aaad-fa9eb8d64e12.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6974
x-amzn-requestid: 0bf3f3e3-545e-4d6a-a25d-a85201053b7e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtW1GE4PIAMFamA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f53820-439a4c727236a366200a8593;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:31:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: gn9ybq1grJs56t0Us7A4sz9dGynQhPRUM8p4ZLHOwEU4lOGfDVCERg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Feb 2023 21:53:14 GMT
age: 54948
etag: "1d421500bf863c96a8c3a6043cc484dfa13d9cfe"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0efa662e-c334-4c53-be4c-81925d55c117.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0efa662e-c334-4c53-be4c-81925d55c117.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b55335999a026a3bf5d8c8c920a31562
08259dd5654e530dc29c35ea537bae21aa88fb0a
69b1cb1bb453da683c879daaf2f266f4ac7399e5de90cae879ce2fa19ac182cb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0efa662e-c334-4c53-be4c-81925d55c117.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8959
x-amzn-requestid: 1c3579bb-647b-499b-afce-f420de41686c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtXqyFDSoAMFhAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f53977-500bef655fb9e0f744216d05;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:36:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qTYasQOed2Yym0WmLEv6OW5yB7EL8U1EmHAWiw7RWlADvNgrvraKOw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Feb 2023 22:00:04 GMT
age: 54538
etag: "08259dd5654e530dc29c35ea537bae21aa88fb0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9477dd-9700-4cbd-8d0e-37bd76c53a93.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9477dd-9700-4cbd-8d0e-37bd76c53a93.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e7cd1e9feb9abc7f7d7f0d5fc7b181f0
cf3ce1808c48e1a86910e16731a044f6cb26275d
426c90298d5a0807b7820d803ce2907268df1195e15d5582eb0ff2f3deeb318c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9477dd-9700-4cbd-8d0e-37bd76c53a93.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7734
x-amzn-requestid: fe4dc342-33b6-45f6-984c-2c71dfa0ec13
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtX-lGiJoAMFW3A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f539f6-489049413f3cb63c537f20d0;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:39:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KyUqB4zqsHWgCv7C3-PymFep4oVmPy4ZHFf75lYOfWbb4qgvVRqoLg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Feb 2023 21:42:20 GMT
age: 55602
etag: "cf3ce1808c48e1a86910e16731a044f6cb26275d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7dacef7f-d2f8-4689-8e99-f6264cd88f75.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7dacef7f-d2f8-4689-8e99-f6264cd88f75.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bb6757305388dc32866ee6c551938c4c
4eab046e0d4f23d91db4a56b8d6d8cde782e2e47
dc0a93e777b2aaf3f3881539de1de15015bcedc2445b8f5558d04a822399bae4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7dacef7f-d2f8-4689-8e99-f6264cd88f75.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8863
x-amzn-requestid: 8983434d-4704-4792-a9b6-625c7d6160f3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtXYfGJAIAMF3Rg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f53902-21e200522022d8bf513f1b19;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:34:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: eKMh8liE2cyCm1LzXIvkcdGa_XRq8Bt1rrmSNvUdT4vZ7vSborqHkw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Feb 2023 21:53:12 GMT
age: 54950
etag: "4eab046e0d4f23d91db4a56b8d6d8cde782e2e47"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F644e40db-f353-42c8-b8f3-a3d61b067916.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F644e40db-f353-42c8-b8f3-a3d61b067916.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 81c0d076a45e9141fd7bbca61d5c0cee
989a1ed5045736130244544586ec5ae24b4e77dc
d3d4ecc39dc8ed3086d6d79f17fe4e01b4ba21a3a221f9d0efe31de04a0cb08e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F644e40db-f353-42c8-b8f3-a3d61b067916.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7733
x-amzn-requestid: 33d1af39-36ea-4fb8-b451-67dd5a1a6e56
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AtW0oEz-IAMFv7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f5381d-3bb7c95c1dafdad70dfd9add;Sampled=0
x-amzn-remapped-date: Tue, 21 Feb 2023 21:31:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fzp81AOtsIUFWOtE_MBMzENTUBtGtXq9-ZBpsCrtQgliMielnuHJEw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Feb 2023 21:53:44 GMT
etag: "989a1ed5045736130244544586ec5ae24b4e77dc"
content-type: image/jpeg
age: 54918
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=CNOR4001CAO0223HNL1PRGDUT&utm_term=P5&user_id=63f613eef8d65f0001b92a0c&cmpid=637fb0f9010e700001e597f3&rtkcid=63f613eef8d65f0001b92a0c
200 OK 32 kB URL HTTP/2 www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=CNOR4001CAO0223HNL1PRGDUT&utm_term=P5&user_id=63f613eef8d65f0001b92a0c&cmpid=637fb0f9010e700001e597f3&rtkcid=63f613eef8d65f0001b92a0c
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1696), with CRLF, LF line terminators
Hash ddfc7379b9c25c5349e72f5646d53fca
1e7074f7fdc143e84401b6f03b9f25a488199312
e54a0e2699029ad366a2ed27a9d688d68a601495f858bfd8fa2cfa602e6964be
GET /nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=CNOR4001CAO0223HNL1PRGDUT&utm_term=P5&user_id=63f613eef8d65f0001b92a0c&cmpid=637fb0f9010e700001e597f3&rtkcid=63f613eef8d65f0001b92a0c HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Feb 2023 13:09:03 GMT
content-type: text/html; charset=UTF-8
content-length: 32373
server: Apache
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=300; includeSubdomains;
vary: User-Agent,X-Forwarded-Proto,Accept-Encoding
link: <https://www.lyca-mobile.no/nb/?p=170723>; rel=shortlink
content-encoding: gzip
x-xss-protection: 1; mode=block
access-control-allow-origin: *
set-cookie: SSESS8b10154026bedacd8362ddcf85d89291=s7u8jg03c14qojkifb38e1271v; path=/; domain=.lyca-mobile.no; secure; HttpOnly;HttpOnly; Secure; SameSite=None;HttpOnly; Secure; SameSite=None;SameSite=None;Secure
newsim_tab=0; expires=Wed, 22-Feb-2023 13:19:02 GMT; Max-Age=600; path=/;HttpOnly; Secure; SameSite=None;HttpOnly; Secure; SameSite=None;SameSite=None;Secure
X-Firefox-Spdy: h2
assets.adobedtm.com/9007b98fe545/844403bdefda/launch-f7ec41a7f11f.min.js
200 OK 109 kB URL HTTP/2 assets.adobedtm.com/9007b98fe545/844403bdefda/launch-f7ec41a7f11f.min.js
IP
File type ASCII text, with very long lines (32762)
Size 109 kB (109288 bytes)
Hash 8f23d0bcbcc86112e872d52fd01ed935
9cb8ac3ce3d54261102ad0b214a0a447d1ca69d5
c060a24db829f13d204fd7482b11b0a7b2a3babd2fa6116d83467dd44b29f857
GET /9007b98fe545/844403bdefda/launch-f7ec41a7f11f.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "40e864f9288197d9931085479e823337:1676967441.308247"
last-modified: Tue, 21 Feb 2023 08:17:21 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Wed, 22 Feb 2023 14:09:03 GMT
date: Wed, 22 Feb 2023 13:09:03 GMT
content-length: 109288
access-control-allow-origin: https://www.lyca-mobile.no
timing-allow-origin: *
X-Firefox-Spdy: h2
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/email-subscribers/widget/es-widget.css
200 OK 275 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/email-subscribers/widget/es-widget.css
IP
File type ASCII text, with no line terminators
Hash 3379c2b888e3d62625c9c1f3d21af1a7
48224a35361bcf31fae76376d05b5a3a12eb6451
6b9e19c3d172833888202c8efc9d22db346b77447fa10ec1fb9aa310d2701eac
GET /wp-content/plugins/email-subscribers/widget/es-widget.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 275
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:26:08 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: "3379c2b888e3d62625c9c1f3d21af1a7"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3KM6Z5UEsB_Jaoiqx5_XBUhljbn3W8C51ji0-5Vh-yMi-9JxiKSSPQ==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/simple-sitemap/lib/assets/css/simple-sitemap.css
200 OK 1.8 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/simple-sitemap/lib/assets/css/simple-sitemap.css
IP
Hash c8f0910076ab0e662182cae00237ac79
5588cf41bbaea68d780f2dfe5a0f338dbad6288b
7d0e0673394c6a33c5d5829be2d5d3e66c832c986386d0518ddc9d3ff0265670
GET /wp-content/plugins/simple-sitemap/lib/assets/css/simple-sitemap.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:03 GMT
Last-Modified: Thu, 06 Aug 2020 03:35:00 GMT
ETag: W/"48b2349aea5c80f04b1c7b111ed0929a"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UbE4x1YP-GVZ980tsG1IVyCcfTlrYZZp98xMOZvwo_BdfmrfCpmqiQ==
Age: 45601
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/custom-search-plugin/css/style.css
200 OK 387 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/custom-search-plugin/css/style.css
IP
Hash 3e4e179912ad687a9735d6c3231446a7
b8d20ad7e9a91e85ed553a9eaa29a4018402816a
5a21886cdfc5af1a0c27014c0180b943b93867c883e45f178279d5859d15fadc
GET /wp-content/plugins/custom-search-plugin/css/style.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 387
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:03 GMT
Last-Modified: Thu, 06 Aug 2020 03:34:32 GMT
ETag: "3e4e179912ad687a9735d6c3231446a7"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YRVlgzKoawVgQJu5f4ZLX8k5-ebWGltvglCgOo63I-H2DU7-N8Tggg==
Age: 45601
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/flat-icon/flaticon.css
200 OK 417 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/flat-icon/flaticon.css
IP
File type ASCII text, with very long lines (1000), with no line terminators
Hash 5e5c8838d3f45e076213445010a63eb8
6aedac1cb54fd087ea16c8bae11c0687bef29ce8
653364905a7234231046bf7134bfb1d2f8f957e10463e74d636e4465bf1b8139
GET /wp-content/themes/Divi-child/vendor/flat-icon/flaticon.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:43 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: W/"944296da525e8552632efd1dc0fd0480"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: DT_g-t0ZR8zc5aPxTD6ps33P2gRQ4QDug_LZU2TDGfH2hLyoSqNPxg==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-includes/css/dist/block-library/style.css
200 OK 9.3 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/css/dist/block-library/style.css
IP
Hash 691e867d6ddbb1a7fe68f8d49d3d3b49
08db388b7b949cdef8a900980b8a979bc0606436
6ffd26c6d7d95dcbf9273e98435f7ef9297381388e00d8986b68e7ff63b61c01
GET /wp-includes/css/dist/block-library/style.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:13 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
ETag: W/"ff1e4526d778743bf4370b47ff17e7c7"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 8RC0wUBw_EoTniy6SbmiBqnRa8Dj85gi3YLNlLUSCQgI7FNH7o4t1w==
Age: 45630
cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.37/js/bootstrap-datetimepicker.min.js
200 OK 8.3 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/bootstrap-datetimepicker/4.17.37/js/bootstrap-datetimepicker.min.js
IP
File type HTML document, ASCII text, with very long lines (32010)
Hash 52b30dc893d14995df58d34ecc5a9f7f
e360fd76bd734011484ed559fd1780e31949353f
eab9dfacfbbb59d341c72a7fe6dd9c12ea4e87f20ccf78bf13bd98ffeab243d4
GET /ajax/libs/bootstrap-datetimepicker/4.17.37/js/bootstrap-datetimepicker.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Feb 2023 13:09:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 8256
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03d8e-9443"
last-modified: Mon, 04 May 2020 16:06:38 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2302424
expires: Mon, 12 Feb 2024 13:09:03 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZzS7z6FKkQxlh708Fjx48ztR37rzHrdMPCLb3gJzOmxmrEk9%2BUymxAGv41KYzd3Ugnsix%2BqjzuVrpBdxigjaVexCBv3wE%2BP987BBIU3hjNITRD1uE0eCJN%2BaRZHTB7Cu0l56MpVb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 79d7f439f88eb4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/linear-icons/style.css
200 OK 1.6 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/linear-icons/style.css
IP
File type ASCII text, with very long lines (7000), with no line terminators
Hash 963ca36a72fa02b071ef7fd37a19fb46
05ae58547b52e742a980ff1e6e6c1b812bef6f75
74fb03b5e021aa49586af226b8132bb7eb5e4367c23902d089f8df38a6f625cf
GET /wp-content/themes/Divi-child/vendor/linear-icons/style.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:44 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: W/"e93b8e4cf5dc750d2d02a5b9d19f9706"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: eIaKg4DN6z-0OGJWSZMR4CuT4mFNLrlrie3Y4LsFMET3_g6tF2RoXw==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/wp-store-locator/css/styles.css
200 OK 4.5 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/wp-store-locator/css/styles.css
IP
Hash 2bd30614666420a0e92a2591ee8ed67c
4e9595b58e37bf20a8e4c061ef40b939808a631d
1eba2b50fc579e8ae8664c0efc42a02cd6c767c9934edb059c85b2c65e8a58e4
GET /wp-content/plugins/wp-store-locator/css/styles.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:03 GMT
Last-Modified: Thu, 06 Aug 2020 03:34:59 GMT
ETag: W/"739b161d5a12c2ca3514fe734735041d"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: CSYzTpfo30Pe2EtLOyCImS-CJVJJAtVtk7iZ1EarqAiGS3kf7DFx2w==
Age: 45601
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.css
200 OK 558 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.css
IP
File type ASCII text, with very long lines (1756)
Hash 9b4bc456787d38b666a02fc0e49911e5
249680bdcbf3ed5eaf1f76b01c7bb37b8f1637e3
5cc5d88bd1a0f7b97d4952057f890e3ff5a0aa6b71c96877a82c2db39d1caea3
GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/style.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:03 GMT
Last-Modified: Thu, 06 Aug 2020 03:34:36 GMT
ETag: W/"f2b86d26574da0399d888e06e0f53d0d"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: M3fXOn425cIjHRibCxXVNWIbZhpL7EB4wFjibdOZgMounCznZboDDQ==
Age: 45601
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/wpml-translation-management/res/css/admin-bar-style.css
200 OK 112 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/wpml-translation-management/res/css/admin-bar-style.css
IP
Hash dbfbc302b0bd90edca28783de421d9de
8583cda2bba95975c41e74f9e6035f777b29c100
2961bb57dcfff925f2e03ad6ad741a457b5f5482bd5b5c221cc20d5d1bfb4268
GET /wp-content/plugins/wpml-translation-management/res/css/admin-bar-style.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 112
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:34:52 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 22 Feb 2023 00:28:34 GMT
ETag: "dbfbc302b0bd90edca28783de421d9de"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: EtIqF5ILq5YU1XWgQ3NFkksHF3GlzswaPZwzs4piW_8HnRWys7t_MA==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css
200 OK 944 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css
IP
Hash b41ac4835424545cad68e84a397fd1f6
967288a41d117310f386a3233f41c7a331982ac0
d4d7bad610ee0a14af7f6049a3b503b49b28531bc4601ca1639a84b7254e8fbe
GET /wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:03 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:14 GMT
ETag: W/"7e1007fa3b22a2dd6d76e09093990e56"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: -71jq24VMC5p6WOBekh3NxCtgSEah9QqTdjf2uskooRxh5p3A6Ejlw==
Age: 45601
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css
200 OK 652 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css
IP
Hash d37ce9451a94989fbdb2bfbf65f03b76
d1238414de1c987cdeb98c79ff0df3c4d79653e4
c5c1388fcb676ac23034c6e34b3c497ec3310237edac7ebea3fcc1eb11141e88
GET /wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:14 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: W/"bead30b2dc0d930e1790c7346a37e1d6"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: a1Em7ti3mfgs1HvQfmcGDQaOznt2rEYFNwan69ZiXCyI7xK0gcSZug==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/css/student-style.css
200 OK 966 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/css/student-style.css
IP
File type ASCII text, with CR line terminators
Hash 64eaec02b035ad1628a7890becee905c
d9a7cd1dd7d3400c09e341e4bba580b80b0a41d9
370ce3c5280f78beb793f8773f3f74b225a2e54f35449df02aa8e181a4842255
GET /wp-content/themes/Divi-child/css/student-style.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 966
Connection: keep-alive
Last-Modified: Thu, 18 Nov 2021 11:11:57 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 22 Feb 2023 00:28:34 GMT
ETag: "64eaec02b035ad1628a7890becee905c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: diFXquKF0idUO01dLoXf-jcGU3oonV8V6iDIAmBdUZJGvNrujYHCrA==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/style.css
200 OK 44 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/style.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 467c6dfcf8e82b379d8d23143d813b81
730f3300641f156a049739f79aa8b1a2fda2b7bc
61bbaa2f797a8505f17725b39cc2ba9b622cb34af31abe9fdeec4fc346cd0a34
GET /wp-content/themes/Divi/style.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:55 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: W/"817303872fd1f4d16b34fcd79ab7d2d3"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: rxfylCFs8-SeTRjgqMP0DUhgmpAuv3FSBRPzO8MEpvgFN6Ociy575A==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/font-awesome/css/font-awesome.min.css
200 OK 6.6 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/font-awesome/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (28877), with no line terminators
Hash e40e2cf2553a2a36208432a67af58741
c9811b8d3c9dd6528f2bd8a24c15ea37d91e9bf0
33213e691e253f781d4e84ffbebd48b1a453840d4258a0f5eaac0ec8bccf62eb
GET /wp-content/themes/Divi-child/vendor/font-awesome/css/font-awesome.min.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:04 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:43 GMT
ETag: W/"4f0c935c3631f777ea790a05a44c1744"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: GkFF_lbXlx6QH9bATirNYB1elA27kgaNT_XwwNahSfg18W5BI9O58Q==
Age: 45600
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
200 OK 118 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
IP
File type ASCII text, with very long lines (505)
Size 118 kB (117780 bytes)
Hash 8d5a358de22af9e234a1c891c660ffe7
131da346f85371ce74b23c7c03f720a60767aa16
c23c5e7ff13ad5797548b836009e8d3fcc4f3d5b3c4343feff7f8be77fe7fcc7
GET /wp-content/themes/Divi-child/style.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:04 GMT
Last-Modified: Fri, 15 Jul 2022 07:16:49 GMT
ETag: W/"07571e83ac07033388dffa6b348bc459"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: DJSFyYmkJ-kDfcqEblZ58kYhqgITtvvLsrwg04vyUngwdOKyg5Ef0g==
Age: 45600
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/epanel/shortcodes/css/shortcodes.css
200 OK 5.8 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/epanel/shortcodes/css/shortcodes.css
IP
File type ASCII text, with very long lines (859)
Hash 2d4cf068751c554343a13f35bca060ee
abe207b74274c0db5b6359849c5b6da2607ebc78
f0e4c9b45a093267c920bbeeb7b83c08a9e84897ea8c8f98837082f25f7e8dc5
GET /wp-content/themes/Divi/epanel/shortcodes/css/shortcodes.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:04 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:49 GMT
ETag: W/"ea1a16f72cd2c8d66fdf5e8924f78eee"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: oMH8fXQQUKAOg1JG672sBGjN90SIj73o3LS1wetjvYF3kmMPgPpf3A==
Age: 45600
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/epanel/shortcodes/css/shortcodes_responsive.css
200 OK 854 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/epanel/shortcodes/css/shortcodes_responsive.css
IP
Hash e265178fef7685c668fe811c4049cece
bfa2bdac0b7a58d5cbedd2a2c500a5e9f969ea0f
e04135115eb50e74834638abfdc910121413bb251691695def49107da45f68e3
GET /wp-content/themes/Divi/epanel/shortcodes/css/shortcodes_responsive.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:04 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:49 GMT
ETag: W/"58f7be607923d9296d5628a2d7469422"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: MMKPUj14BX6OEwiVCCfbddq04yi_3gPabyn_A7rgXr8dPzBI6DcsYQ==
Age: 45600
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/includes/builder/styles/magnific_popup.css
200 OK 2.0 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/includes/builder/styles/magnific_popup.css
IP
File type ASCII text, with very long lines (311)
Hash e530857d5e5c6c58a23a6f5891a1e05e
9a9021e356e30ffb3abca51f44aa10b1db3633ef
1fb2418b27303d07ac2c32dd282fbaa15f6945085f380f58d4160bd0b784873d
GET /wp-content/themes/Divi/includes/builder/styles/magnific_popup.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:04 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:54 GMT
ETag: W/"6e30bbc36a055e4e39e3b1fe966ba0b2"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: mE_g2havAaWP14ZzGAVHNBQ_FQwT3DOeMPYx2qPOh3tX2NVdRdpLGQ==
Age: 45600
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/registration-portin-facility/vendor/jquery-ui-1.12.1.custom/jquery-ui.css
200 OK 8.3 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/registration-portin-facility/vendor/jquery-ui-1.12.1.custom/jquery-ui.css
IP
File type ASCII text, with very long lines (2363)
Hash 6441a4064ca1692bf0b83f1601aafe06
8b53f53fad31282bb1c9e2ecf3ad166c9e48e85c
268aa8b63c0d386ba107039d6fd910c30e10901b393fb55b2f63ab87ef87feee
GET /wp-content/plugins/registration-portin-facility/vendor/jquery-ui-1.12.1.custom/jquery-ui.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:26:20 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: W/"aaa57aaa03fc850983ca6ec061b9f281"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Azeiw42jBeTL5lGYNpsfCIC6C90tV1F7xAH8IDDkxB2Kurn9xgv00Q==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/registration-portin-facility/public/css/registration_portin_facility-public.css
200 OK 5.3 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/registration-portin-facility/public/css/registration_portin_facility-public.css
IP
File type ASCII text, with very long lines (1963)
Hash 844f1b97ac32bc5e90f30bfca6c994c3
192e686b99409b44e9fcd7db359e35b9f7212fc3
270ed538a8073fdaf926661384ce5fbd905f5437d584348fb6cbaa128f1b39ec
GET /wp-content/plugins/registration-portin-facility/public/css/registration_portin_facility-public.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 18 Nov 2021 11:11:56 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
ETag: W/"abf770fa629e1cc9a5acdab4c79f0cf5"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: r2Q-1xY1pLV7LU2ShTMF4YYEFdGHK3Kdv4U4Xq2btR0Up1Ou_6hMag==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/testimonialslider/css/jquery.bxslider.css
200 OK 892 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/testimonialslider/css/jquery.bxslider.css
IP
File type Unicode text, UTF-8 text, with very long lines (3002), with no line terminators
Hash fd1bbd522f73971ceb633d76d1c6ad42
812213b6315005f23a15d3be436bd475b2a0024a
fe6b34bd6ae17d0ca71383351693744ea9238efdaafc76c7ddb0b7693981b32b
GET /wp-content/plugins/testimonialslider/css/jquery.bxslider.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:04 GMT
Last-Modified: Tue, 27 Aug 2019 08:26:43 GMT
ETag: W/"44f831121d8add3e33113650da1f8f3c"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: xIiqpRPGy79zf6fGYwlzaZ5NO_5eubdmnFZrkMbwpl-XLylQvOZk5g==
Age: 45600
d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/jquery.js
200 OK 34 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/jquery.js
IP
File type ASCII text, with very long lines (31997)
Hash b55a61370cff29115f649baea8c1f447
1188693c7fee5d59c60f0e0a04c13a9448e51887
7620ace42d3d89c13db19edb0d5043e6530337834e12b6070fd0ef6a0131f394
GET /wp-includes/js/jquery/jquery.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:44 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
ETag: W/"49edccea2e7ba985cadc9ba0531cbed1"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Rpg_81gAT868BLL7Q4AaEm_tAVckqW8fJQUUzZGcR3DVInQjkanMMQ==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/jquery-migrate.js
200 OK 7.9 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/jquery-migrate.js
IP
Hash 6acdcd683908ab1c2679a920db0e3b8e
2081809f2e7d297cd9dedbcdb1a5bb3389282b1a
ad9d02a313f5d515a7d6c7085c4b037cf7b6bcf7d0a7f845d58de08c4d29292c
GET /wp-includes/js/jquery/jquery-migrate.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:04 GMT
Last-Modified: Thu, 06 Aug 2020 03:32:44 GMT
ETag: W/"6c57b762589f13ea5b3579ca5e6c369b"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: S1TpSVIOIEMry3Tg0aYRpQZ-KC6GJOsbZz-1-aCgKz85y4joutV43Q==
Age: 45600
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/sitepress-multilingual-cms/res/js/jquery.cookie.js
200 OK 1.1 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/sitepress-multilingual-cms/res/js/jquery.cookie.js
IP
Hash 5af8ceabe5cec6b2512220042ce79210
66cbd29c31f744d48cf825fce53fb7dd0497f866
fbd5f0e1b387d2a36c8fcfe8fa7cfe20caf439daed01b35b1750b21bf528bccc
GET /wp-content/plugins/sitepress-multilingual-cms/res/js/jquery.cookie.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:04 GMT
Last-Modified: Tue, 27 Aug 2019 08:26:40 GMT
ETag: W/"ad10cd46a043368685a36a611490d08e"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: WNbEeS889GKGzV_9f8galx4OwPvnZjpdw4jQa1zSqyOlUCZt9Eak6A==
Age: 45600
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js
200 OK 227 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js
IP
Hash fdd67d0316e33e8f57f8e3cbeaf5b490
cc18a94a3a50ba6ce7060214536349ce06bda3a7
d0c6a55fbd3e75031909f5cb7bb05b561313edae55c5657e5435c8a9623adcb5
GET /wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Length: 227
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:26:40 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: "fdd67d0316e33e8f57f8e3cbeaf5b490"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9ChCsvFDTUaBQL7sfd36wqmfQDjHHEvORJTUTfcOHytqs1JXUoKz4Q==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/core.min.js
200 OK 1.8 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/core.min.js
IP
File type ASCII text, with very long lines (3706)
Hash 52e1a9b065ba39d28db010fd286ae204
da3f9265eac53855df786c6f4b8f813f7ac7fb29
ef0cac6d41ec158c95903b585c5421f3c59e1677fe5943bdd50feb2288a2104f
GET /wp-includes/js/jquery/ui/core.min.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:47 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
ETag: W/"96ff65c925bbaf3e4e7891a7ca1f2b1f"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: SsIZHxqMDPQhd0af1-vWPQPTS4xTDmuB8SWpfL5RwaErjZM1SsLaBw==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/widget.min.js
200 OK 2.6 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/widget.min.js
IP
File type ASCII text, with very long lines (6614)
Hash 5037f1411a7f3ad64087e583c6a16f75
9a912c67adf0275f11fce68fab075b2f9bbcb6d0
535696b88e931f34bcd3b8c13845888d13ec0a164fd15732160130d11697dd78
GET /wp-includes/js/jquery/ui/widget.min.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:47 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
ETag: W/"00dedd56324da186973a3b2cc5e8023c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: AErho0CTf9NGyufleJkPFWStCkXUVFZOszEVH6ewa58IfCGID6PFTw==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/mouse.min.js
200 OK 999 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/mouse.min.js
IP
File type ASCII text, with very long lines (2927)
Hash e466629bfa82c6f1dc466ac4a5b5e495
45cc7d9457ef090a9c3cb044a5e3ce2115aa7bcd
a95eb8bd20eab719947faa4cec36315c50e21652801f14cb0581afac05aa2c47
GET /wp-includes/js/jquery/ui/mouse.min.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:45 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
ETag: W/"b317c4ccc9aa140339ad72fa27c77266"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: X3v5Bi6z82GDaPv815osb57Qz25uDfEwnlu0flOOW3x3XS-8wIliwQ==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/sortable.min.js
200 OK 6.5 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/js/jquery/ui/sortable.min.js
IP
File type HTML document, ASCII text, with very long lines (24670)
Hash 6c900b90c704314d6a2d2f99be9529e9
c26100a23e73aa8a0377f64240bb5c88b96c976d
9f04101d3487743df922acee5b699e0dba10125b7a06da66f206a44aae0f374a
GET /wp-includes/js/jquery/ui/sortable.min.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:32:47 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
ETag: W/"efa8171f2226a422003417095d8549dd"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: aAEK7OTWRKvAKLOTBBNAAEMSE9IvFXciy_I7F3yq817k7F7eCD5h0A==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/custom-search-plugin/js/script.js
200 OK 513 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/custom-search-plugin/js/script.js
IP
Hash c97791923a1a0a14d68cad895f60de7d
a3d11e1db9e3fb8d898e6c74c9097fd3fcd4b593
f96ad688c67d359d88c083023b14397587b00d47a87ef2e3332c776e97bfebb3
GET /wp-content/plugins/custom-search-plugin/js/script.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:33:34 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
ETag: W/"979b9c65525365ca207263cefdeab1e3"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 2AoCh_Yqu26eLTAlRSZTRLPC6_2fPI6YCzt8O_arDr0ba5zTblIGjQ==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/registration-portin-facility/public/js/registration_portin_facility-public.js
200 OK 3.9 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/registration-portin-facility/public/js/registration_portin_facility-public.js
IP
Hash f376134818fb9fc187c514bb9a506834
dc6649055ac84b76577667a16bf0468645c0a478
df1ae3ede2c68c297f699204b4cc6222c8d7ca313c34582fdea35c6ee8c46898
GET /wp-content/plugins/registration-portin-facility/public/js/registration_portin_facility-public.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 08 Jul 2021 11:08:26 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
ETag: W/"d3b85876ff1588f5bf98de96b86bdb1b"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0uSR1SPC85ZabU38Z9bIeAZRw9PBb-zg2CAt9L7YOH89HxEjwHY0mg==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.js
200 OK 702 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.js
IP
Hash c6d089d81d5dc96731527b729681c0c0
6560f0c3226415d7d27c36d9d987fc507c78ee4b
66d18f6dc9983a817863220206f19b9b68ff7413f6f885bd2892c024fcc18252
GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-dropdown/script.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Length: 702
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:05 GMT
Last-Modified: Tue, 27 Aug 2019 08:26:43 GMT
ETag: "c6d089d81d5dc96731527b729681c0c0"
Cache-Control: 2592000
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: OZOUoUXjxiZAOLXU8sh8BqYASc4PkI2e65HZBReQZSUIUCFXPMXeHA==
Age: 45599
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/theme.js
200 OK 12 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/theme.js
IP
File type ASCII text, with very long lines (348)
Hash 5ff7725a2b6b151c3a2364190669d550
528b3816ac3cd762aa6fd6b178f7bea1d482e466
bf9666d5e4e95a63784b812c3da25fd2292e5bb3a68c984bb20dc904b1196dc4
GET /wp-content/themes/Divi-child/js/theme.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 15 Feb 2022 04:49:45 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
ETag: W/"d056838fef7522c86d80206e3384d0d3"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ZyuIi6bQQhvtltq7yvD9KNx8Ic1o9X7V1bNbThLSA485PukpWBrVQw==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/registration-portin-facility/vendor/jquery-ui-1.12.1.custom/jquery-ui.js
200 OK 125 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/registration-portin-facility/vendor/jquery-ui-1.12.1.custom/jquery-ui.js
IP
File type ASCII text, with very long lines (1002)
Size 125 kB (124690 bytes)
Hash 3bf3e8be72de657223ec6079555800f1
78fda12aee59e1dcafb9c3df27defe90721c63aa
045cd50d79231c4275151237e96a6398d5fde4d14414555e4178c716f82b5b96
GET /wp-content/plugins/registration-portin-facility/vendor/jquery-ui-1.12.1.custom/jquery-ui.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:26:20 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: W/"1ef5b99f72350903168526e3f8002de4"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: w8lRm-Mk3nNAnQ4X533AeTaGR_qb5NYeENd-bP40wWnULaqBDO7ENQ==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/registration-portin-facility/vendor/moment.min.js
200 OK 17 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/registration-portin-facility/vendor/moment.min.js
IP
File type ASCII text, with very long lines (51679), with no line terminators
Hash 81abb424de0c04e822ea9d4d43a0c3f8
0d78fd4b0752a3181909d05dbddc21f4a0b598d3
47221e795a91e964f7eed2347d86534ec95bc6de038e737b1835591c1271fe04
GET /wp-content/plugins/registration-portin-facility/vendor/moment.min.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:26:21 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: W/"8999b8b5d07e9c6077ac5ac6bc942968"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: EZitxEL3Cxvfc1CihCNUGywv-ryprUHe3kW3fOnJyYS9Ls7tFw7QNw==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/jquery.validate.js
200 OK 7.4 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/jquery.validate.js
IP
File type Unicode text, UTF-8 text, with very long lines (22821)
Hash 071db993a81f7f769659415de25451a0
b4cffe372975f88b89891579b552e3ef9a0798ae
778b0f6ec878355723121a666ae69f401804a55f1e7cc4f3cc97b860b8f148ec
GET /wp-content/themes/Divi-child/js/jquery.validate.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: W/"50d37feba6afb8e8ee322a7b7871550e"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Qn-_8rmbmuMX1r-o6BulV7kSsWlt6zPCMgsVb5uRrJaJtVDrY4b4FQ==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/jquery.marquee.js
200 OK 2.3 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/jquery.marquee.js
IP
File type ASCII text, with very long lines (1219)
Hash 822b77cff070545519b0ef40cd2a4488
8d9bdaf08415133e284e0f4ee46d51d656b8dccc
5f6184f201501deff575a04af595b608a82cf1fa3948655f259cbb16aadc2373
GET /wp-content/themes/Divi-child/js/jquery.marquee.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: W/"a2ac3fef53d651ac8562f1412b28b359"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: n41nmqXMkD-w8WzL1xgVcsQAmPzrba9YRkkXIgqZ5LJo6LB0CnmSPA==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/additional-methods.js
200 OK 5.9 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/additional-methods.js
IP
File type Non-ISO extended-ASCII text, with very long lines (2940)
Hash b3a49dbb827725681bdc4be530b4d4dc
244fc1924f9417c902be49b5db75101b69b44d56
0a965f45f2e949cca716799f30d59d5f1f22b3a1e87f88b24cc1b8055b3fb2c1
GET /wp-content/themes/Divi-child/js/additional-methods.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:40 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: W/"074966e2db7e1caa07fd7d0bac25e844"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zk0KX04b5nCTF97cdFztSMM6IXVFEn8k30SPNl9sRcjRaqz_FtpMlw==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/countries.js
200 OK 3.4 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/countries.js
IP
File type ASCII text, with very long lines (7323), with no line terminators
Hash 849d149f0aa54e89c9ae4914da58f058
ad57bd889ad286cf1485de4cf90c43f6fc3de3c4
e9366f725516c092c539b6badc887906cd3ad71ea2a72b32e317dd7bf2b91cf9
GET /wp-content/themes/Divi-child/js/countries.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:05 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
ETag: W/"41a7f1d63de5dc564de5d2e96ba33db8"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Hr89IDk-ju7d3EWT5xpB7MAEbyNvPF4a2YCtr_3wqZjFgYgGwQYghA==
Age: 45599
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/selectize.js
200 OK 18 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/selectize.js
IP
File type Unicode text, UTF-8 text, with very long lines (3172)
Hash 86dfa7b22b1c86c4411bd9fcb1063f43
e4b6fe33ea645037f2d65fa91d223b536bd7d35d
8ab4926668e046d9372340a9a1a936b1329b062ec9d58229a9e6556f22ed5844
GET /wp-content/themes/Divi-child/js/selectize.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:05 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
ETag: W/"0941c2f6d545a74b27f2ccdbe7bdc931"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: DkUhRJ2vYePoF-sj-gsi9MdpImuIFRje_OePZFjTaBLLNOZg-CimqA==
Age: 45599
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/roaming_rates.js
200 OK 8.4 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/roaming_rates.js
IP
Hash 067c110c37bfec949a1ee68f9e2d7308
a0ab5b48797f7a0e25663118d854aced83a0ccf0
0aa4e7aec554a035ce57b27cc1315e55a7d0d320b8c711ed4c66a13b68a47f17
GET /wp-content/themes/Divi-child/js/roaming_rates.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 23 Jan 2023 09:06:59 GMT
x-amz-server-side-encryption: AES256
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
ETag: W/"95eb08e996deb448fe86bcfade333ccc"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jB_lor7JoEKNMsGI3CEKsHNZH2XvClFCaiAt1rzci1LZWnaQy5mGzg==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/register.js
200 OK 2.9 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/register.js
IP
Hash 3f6a79dbbd2a8cf6f6c0e29e68e0bc3e
a120631fa7bc0b2ad61973f88e138a8514e8ecbc
862b1e9484f10e4acc2d5bc7af34c3d89b55163c4b9d1c1f10396b93735ba800
GET /wp-content/themes/Divi-child/js/register.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:05 GMT
Last-Modified: Thu, 20 Feb 2020 06:59:06 GMT
ETag: W/"a4c47e49f1b792925db5d2ee23d17942"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: f_KEaBGcJY2RuO9upOSUFxunG_ULM8B31dFk_JtcYNlhBDmWFOlIvA==
Age: 45599
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/bootstrap-datepicker.js
200 OK 8.0 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/bootstrap-datepicker.js
IP
File type ASCII text, with very long lines (1634)
Hash 9d6d59ea30d371b8e45e5269e6b188e9
2605ce2763203e50487d1aafe861eafd4417f9ec
5bf90894474c1c30167a6a3cb55f4bf6d3a5a678f18fe2d5d516dee2f0e0f7ee
GET /wp-content/themes/Divi-child/js/bootstrap-datepicker.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:40 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: W/"8260533cc46428d9b49e3f137ef2efe7"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: cp0jjRaaKXpeYsoLdIRKSnEbtZ7HPaNNeroDdl86465d25KeqF9giA==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/bootstrap.min.js
200 OK 9.9 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (32033)
Hash 149aa9d9a43365bd908b89d49a6f17ca
904b97caf4be7528ed378d8360cdd09dcb54effc
a2a08ec8967eaba2d1729a39d78c2c037b39f0e05a0a095127846e0c42cbd8ab
GET /wp-content/themes/Divi-child/js/bootstrap.min.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:40 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: W/"5869c96cc8f19086aee625d670d741f9"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: vAK3PweEX0de5_tGV3zL7YLTYPQiNbF2Mqu4_MeuSrH3yU-cKJVmUg==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/custom_validate.js
200 OK 391 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/custom_validate.js
IP
File type ASCII text, with very long lines (391), with no line terminators
Hash 9f4e4bb98cbc4c5fe6ddfc05c7c48095
e87b52374a265e471462e297fad51a39763f2d3b
d48f2166d51e343d4d91b80bf04c970d3d10603d8a6fc5060a53b73c2a8b70cf
GET /wp-content/themes/Divi-child/js/custom_validate.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Length: 391
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: "9f4e4bb98cbc4c5fe6ddfc05c7c48095"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Tpv_zc79mJ1YIQg6R-eNFZm0K4_spYx62Do-NW0bqXQkE_tUouD-2A==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/nc_ajax_script.js
200 OK 7.1 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/nc_ajax_script.js
IP
Hash 13dda4cf06e8f8e0184d8d4a530cc4ac
546e44850f0f6fb32ffc425cbf847fc9403174cf
eb055af689d71a03dcccdb6b57b56c391d5c80ddbd4c7fe22d3f5e4690abdd0e
GET /wp-content/themes/Divi-child/js/nc_ajax_script.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 05 May 2022 06:47:46 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
ETag: W/"9353377fb1b76e466a7ac26634defc75"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: p37H1rug_zDfIMPp7hH197cxWb0XaLLUB2Dy1BiPOar39BtrUOy70g==
Age: 45631
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/tab_custome_function.js
200 OK 533 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/tab_custome_function.js
IP
File type ASCII text, with very long lines (1045)
Hash e208ba9eded9c83d887133376129bcce
a3d6a0051420bb54c7b264386d21f13c81afc91e
c863c37ee40662d92469fdb13a22884d44e60d18882d38ba638c759941e0e6d9
GET /wp-content/themes/Divi-child/js/tab_custome_function.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: W/"5ad0eb623e462948f1ac5a7f6174f22a"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3ByybXH5MOsAVPQq5MyrbYJMhojHvrnCzDkyJKuXlzHhkSkkiD33bA==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/custom-ajax-script.js
200 OK 6.4 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/custom-ajax-script.js
IP
File type ASCII text, with very long lines (507)
Hash ba15e6c79239a64f8128fdb1d88170dc
3f963de5453c184dbda3dffc1c87ebecbbad202b
c99d406858b85525c76b4e7c25dc361563c8b5ebc4422c3851514582b84ca96b
GET /wp-content/themes/Divi-child/js/custom-ajax-script.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 16 Apr 2021 07:45:53 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
ETag: W/"2348f035e1ba7ad6b8df58dbbbd5818e"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Bc9j56Gg2hg8tyVJewL1Drp8tXLhVcw8rGZNCFL4y9t6pNXRGMVpIg==
Age: 45630
assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement.min.js
200 OK 12 kB URL HTTP/2 assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement.min.js
IP
File type ASCII text, with very long lines (32717)
Hash 9edbefe8919a34cc9ec5343e49caf90d
9e8f2b92a35df8e01814e558d10248a928ea2504
c276e66ee697edfb8fbe70a13d6cb8498b21fb998d10d6faaf3999f34f5525cc
GET /extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "dfdd9e1f988805f0c2fbb10cd6b8f034:1663863409.614694"
last-modified: Thu, 22 Sep 2022 16:16:49 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 12384
expires: Wed, 22 Feb 2023 14:09:04 GMT
date: Wed, 22 Feb 2023 13:09:04 GMT
cache-control: no-cache
access-control-allow-origin: https://www.lyca-mobile.no
timing-allow-origin: *
X-Firefox-Spdy: h2
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/lyca_login.js
200 OK 2.9 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/lyca_login.js
IP
Hash c11ad3d0aea090e69660de9129fad90b
fd3d8a718763ac140ed20fafb63408f4acb18b64
fd837793442ee87f42b8e7be0cbcbdc9caf2c326435af99bb7a3a1a0afb4c00b
GET /wp-content/themes/Divi-child/js/lyca_login.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 08 Jul 2021 11:11:42 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
ETag: W/"425f2a70827f7926182ef6bbfed523ec"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: XCNaqD9bK-5VeECv78aImN9-uKyQ12mc4jUy_WyxXiinNS8goGLKog==
Age: 45631
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/testimonialslider/js/jquery.bxslider.min.js
200 OK 5.0 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/testimonialslider/js/jquery.bxslider.min.js
IP
File type ASCII text, with very long lines (19040), with no line terminators
Hash 3a5d31296f05c174c78d14697c3552b8
68ce9d8c4a8e39a6de62c32a18189c7258130971
2741801bdad765b41ca67ea1f7396dc544ddab58a5c05712330b7334b67039fb
GET /wp-content/plugins/testimonialslider/js/jquery.bxslider.min.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:05 GMT
Last-Modified: Tue, 27 Aug 2019 08:26:43 GMT
ETag: W/"9f57dc4754b577d72bbe670cbf1ca847"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YVWBoPXT6zIIA6pVm9Wy3npJKEH6zBIKEA4Kb3C9QPQloMXrYRY71A==
Age: 45600
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/personal-details.js
200 OK 1.1 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/personal-details.js
IP
Hash a21c9424a25a0f526fad4bd0721ed423
ae2fb8d6537a737c8e70bf156520da00ec96f7de
b8bfda068e0fb48066a6d5eb2367543a95953789ce8028de4d073a726f7331d0
GET /wp-content/themes/Divi-child/js/personal-details.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:41 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: W/"c500e6db6f2acf6ea19feaa28e6cf91b"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: bUbv7A8u-XJPr1Mhq1IgUteM1-feuNyOAAD_TEqE5h7exw6aGRhiIA==
Age: 45631
assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_ActivityMap.min.js
200 OK 1.6 kB URL HTTP/2 assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_ActivityMap.min.js
IP
File type ASCII text, with very long lines (3138)
Hash dbb5211703cf7696d634360cc8874fa7
9231e7ebe8096b629c9ac522e41f8c2a8013db99
535a218392da01549f9fd640908f59c213e809c2db778c36094e3a84959106df
GET /extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_ActivityMap.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "b89fcb8870ac40eecb6d3cc844d35389:1663863409.92483"
last-modified: Thu, 22 Sep 2022 16:16:49 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1598
expires: Wed, 22 Feb 2023 14:09:04 GMT
date: Wed, 22 Feb 2023 13:09:04 GMT
cache-control: no-cache
access-control-allow-origin: https://www.lyca-mobile.no
timing-allow-origin: *
X-Firefox-Spdy: h2
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/email-subscribers/widget/es-widget.js
200 OK 1.2 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/email-subscribers/widget/es-widget.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (1311)
Hash 6e72292955db4c366a29ff3bdba7c415
1571af5d40e8d06462f8fd057bdb2049d43c98b2
390e749f67fb27a21c3e43a5309e65f3996039dbdd0af9c0d9cfac74258e24ae
GET /wp-content/plugins/email-subscribers/widget/es-widget.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:05 GMT
Last-Modified: Tue, 27 Aug 2019 08:26:08 GMT
ETag: W/"3c71e2fbb10d22b508ed878ab58b2ea3"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: l0dyMGg2QW5t6MajD467XYNnyNR1XQEJ8iHPu47zbEcWC8s7jirDLg==
Age: 45600
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/email-subscribers/widget/es-widget-page.js
200 OK 1.2 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/email-subscribers/widget/es-widget-page.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (1362)
Hash 63d271e457a7058f6a5f5d0bf4866151
6a40aea0625f6b11fd409e071d9657d06dba7e4b
64a3bb8dc8034a8e23087559e9b9436f1fa8e999232d446d1c2db2d54267c716
GET /wp-content/plugins/email-subscribers/widget/es-widget-page.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:05 GMT
Last-Modified: Tue, 27 Aug 2019 08:26:08 GMT
ETag: W/"1030e1b65118f1b146dbbd44ee3c572d"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: a1fkm3Of-AmePlTXN-IlHcR_BxDcr-aaKjLMwGWR4986HVYfZybl1A==
Age: 45600
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/lyca-marketing/assets/js/marketing-script.js
200 OK 904 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/lyca-marketing/assets/js/marketing-script.js
IP
File type ASCII text, with CRLF line terminators
Hash 095d4bb69978c3b46099fb597e9f4aba
9b1a484437e7625ae7813fa6f5eb4c5c1a4dacd5
9e9fe89623c02fa1e5bc6c0f401d3c49ad5c50913f7fe9db9f6462d17c1dd9f1
GET /wp-content/plugins/lyca-marketing/assets/js/marketing-script.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:05 GMT
Last-Modified: Wed, 29 Dec 2021 11:10:09 GMT
ETag: W/"a70e1af5029b7752f5ea8ebec97b39b0"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UTUVuFTO_ioMdPeLZx5hVWvl9coSp6GNqGdtVwm7ipdU4ikTJUrTqw==
Age: 45600
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/lyca-marketing/assets/js/jquery.lazy.min.js
200 OK 2.3 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/lyca-marketing/assets/js/jquery.lazy.min.js
IP
File type ASCII text, with very long lines (4890)
Hash d6f2779e2d77bbace41dff1faa19e08c
a55c3c6c5bda7068f63a00aa42295a43cd8f4a0f
e6704c8948240ce9da179dccc216c63886ac5a80deeb40e9d5f66a0e3d930220
GET /wp-content/plugins/lyca-marketing/assets/js/jquery.lazy.min.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:05 GMT
Last-Modified: Tue, 27 Aug 2019 08:26:19 GMT
ETag: W/"2a58139bca6dd26694155d0a01c47438"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: mm2Fyb1wRoUlE8TN-RodXuM7e3XyUw2O7JHKcH6b2e9iphjp9-gSCw==
Age: 45600
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/registration-portin-facility/public/js/messages_nb.js
200 OK 978 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/registration-portin-facility/public/js/messages_nb.js
IP
File type CSV text\012- , ASCII text
Hash 255fcd2f937b840680dcb577baf89acd
40be9e0e712ed6187b20ee82b3aaaa7d2877215e
9d123f8d19b3c036b885d86ea6bd431b80b45795a32a31bcef2ccd0116d02e2d
GET /wp-content/plugins/registration-portin-facility/public/js/messages_nb.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Content-Length: 978
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:26:20 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: "255fcd2f937b840680dcb577baf89acd"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: bZImxcoNlTI8WVxvnnB4jo3rmCTYPxLnnpZ8y4C6cgQZdp4Zfj1XjA==
Age: 45631
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/includes/builder/scripts/jquery.mobile.custom.min.js
200 OK 2.9 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/includes/builder/scripts/jquery.mobile.custom.min.js
IP
File type ASCII text, with very long lines (7687)
Hash e91f916e22254517ad406df83c1f3d44
cbf9f2dd610f82e00d1d6b102a7397e2564f0201
6f30e1ed8d3110da7b273889d3900fe117a2208db2018d14f9ba7d3768fb5f6c
GET /wp-content/themes/Divi/includes/builder/scripts/jquery.mobile.custom.min.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:53 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: W/"74ee4c679b03074b55a1da9bbbe29cf5"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 4NguSXonJTsFQ7cYraDdupuBWE27ReNQrJSYtiA3WBP3siMHZxuUJA==
Age: 45631
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/js/custom.js
200 OK 12 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/js/custom.js
IP
File type ASCII text, with very long lines (372)
Hash d2e49fcabcc1bc1d4818ce220c326ee6
e6c81aa5fb981e203207ff150531daf3e62e7fb8
52f4febdbd39b2c6270e4e373bf39ff419f804bc798a84aee586f58b15ee08f6
GET /wp-content/themes/Divi/js/custom.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:54 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: W/"b50bdfd83091c84fea65892969826551"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 636NUI5kEaBXjEOGuzZeEUKjtDQSf1U5d8QQAur9mH1YIXFf8VlsSg==
Age: 45631
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/includes/builder/scripts/jquery.fitvids.js
200 OK 1.3 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/includes/builder/scripts/jquery.fitvids.js
IP
File type HTML document, ASCII text
Hash 141d230ed3410d891129076bdf1a7e1e
a5b2d42fe73ae233f09f5da054a29ebaf45635ac
66a15a5cc108ad20013049cc029d41e1c05e6f9c108c45d631e288ad8bb960b7
GET /wp-content/themes/Divi/includes/builder/scripts/jquery.fitvids.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:53 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: W/"3fde640beffaca6853692c3a8399837f"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YdGJv6UuoB55gBzM1GDbVsqpHmXcgNyYSdaoMAkWQmCO9uqTMqQavg==
Age: 45631
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/includes/builder/scripts/waypoints.min.js
200 OK 2.7 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/includes/builder/scripts/waypoints.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (8668)
Hash b3a576992c16b5ec336669d5e493f790
06e7ad21c9c91d0789126bc73a2accdf564085a3
1762aaabb240357ccbee5f83f3222f44d8d60404faf888028c47c421659a2873
GET /wp-content/themes/Divi/includes/builder/scripts/waypoints.min.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:54 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: W/"43b1aa1ea2d73e79e9d45980c7920446"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1mIsh6Xxl5uphKnhBFr3cwcQeRqRCZZNe1fl5-NDDjF1aQNVLqffpQ==
Age: 45631
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/includes/builder/scripts/jquery.magnific-popup.js
200 OK 8.4 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/includes/builder/scripts/jquery.magnific-popup.js
IP
File type ASCII text, with very long lines (21123)
Hash 5d177d636705a858a32daae4db2e896b
466b8d23d12ea40d36488b2bdb16bb73cd06919f
506875d04ab2f8f96df3f3bb99f65a77d32d8e76fa26befbdc38e31d8cadeb49
GET /wp-content/themes/Divi/includes/builder/scripts/jquery.magnific-popup.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:06 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:53 GMT
ETag: W/"d3d4dfaa785d79304639e91487339e8c"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: IcjWpU0iOPyKBnLAWsoqdhq7KesEqTosUm8iEICdA6Qzy5Rtb3-mDQ==
Age: 45599
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/includes/builder/scripts/frontend-builder-scripts.js
200 OK 32 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/includes/builder/scripts/frontend-builder-scripts.js
IP
Hash 08fc8ed6b0be43bb7c45c111e377273e
ae0f613f08af25512ddf9987232071a034e386b2
6e13082c2cf550effee4a91a1a30ade6cfec19637402a3034a558dd34ac7c126
GET /wp-content/themes/Divi/includes/builder/scripts/frontend-builder-scripts.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:53 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
Cache-Control: 2592000
ETag: W/"930b6b45467d1583ed34cf042cda1790"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: IghXBGSTVUWIpOl8NzYB8wskzbrQsHPpMwtsq-UgW11i2mdmK_VI4w==
Age: 45631
d3uayxmzbnco7f.cloudfront.net/wp-includes/js/wp-embed.js
200 OK 1.3 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-includes/js/wp-embed.js
IP
Hash a3cacf7987efe841394ab0c091d18aca
bfff11917aa7b1fb6729f2b9911ac55df2d076c6
da9848b6b2d331952a400655c534955a9245565503996fbdfe4a1c6f4d6ca200
GET /wp-includes/js/wp-embed.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:06 GMT
Last-Modified: Thu, 06 Aug 2020 03:32:49 GMT
ETag: W/"23e24e824f384c5eb11e73576b4ac93c"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: InEIuXbdq-3TF--5xMJEuoBla_mEx-a0tZyYXWuSgl6XBWiUUeIIrw==
Age: 45599
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/email-subscribers/widget/es-widget-customize.js
200 OK 1.7 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/email-subscribers/widget/es-widget-customize.js
IP
Hash 31c1050df6110be473c36eb922b0a1c5
b8a092f97a1db22c9cb20910c06f3333adccc927
7e9988180c5b2c3215aab5d2d2b9552fd09f4bc78b7d3f85cb7bd5b083403291
GET /wp-content/plugins/email-subscribers/widget/es-widget-customize.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 02 Jan 2020 06:50:15 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
ETag: W/"5a9afb3473dad68557477591fdbf852b"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: vZq1QGHPJ4hCG7kSbR_9sE2Pe0etRm_TGYXffPAMuykSmp5EpahvhQ==
Age: 45631
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/lyca_cart/resources/functions.js
200 OK 5.9 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/lyca_cart/resources/functions.js
IP
Hash f8b329b141ae7b222af77b51295db830
17ed6cba36c49b0a881380f8c59919f9b775b82d
1c6ed93ea314de6f9a5838d46895df3596195ec17521f1c79e3085e2ae68249b
GET /wp-content/plugins/lyca_cart/resources/functions.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 23 Jan 2023 09:06:59 GMT
x-amz-server-side-encryption: AES256
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
ETag: W/"e121b3266c620b5395b5340979fc1d5c"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: V8dCbEDgIdO9ehGszeSI8VwZUCz6O_7-TUY90lcNVF9oqpgUmqXYAw==
Age: 45631
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/forget-password.js
200 OK 1.3 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/js/forget-password.js
IP
File type ASCII text, with very long lines (359)
Hash 22c8b4279ef7b537e847f63489eb66de
fbce73c099a455b47ce229097ec3ad8325b133e1
34c4a1a5823df02a5fbe8eac013c638e0a01526f91ae164fc68bcd43cee59255
GET /wp-content/themes/Divi-child/js/forget-password.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:06 GMT
Last-Modified: Thu, 05 May 2022 06:47:46 GMT
ETag: W/"a42f9a0d870404f2741a0ee9237c2f40"
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: G9zHDULXBqVhCcf2GpADzk2ZQzwe924mcd24PhAJXYnNvYfyvCdl5A==
Age: 45599
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 67d0353e59411ba1f85c492efa548d94
2bb48dd2638abb14217de43ca03d2485a31eb7e7
c50c81dc979238b0bfea29f69cc5b4e6277e06c407025412430c190acf1e8d29
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash d946f390988dce190ab0217e162971c4
29fad973e20c47e9350fc099fd8fb79d9cd38663
63cc8e3076d9fc00667fe78eeb07f6d8ca8f086e633402ce823ba4f637b6f2dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4423
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:04 GMT
Last-Modified: Wed, 22 Feb 2023 11:55:21 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=394C334E6308D50C0A495E9E%40AdobeOrg&d_nsid=0&ts=1677071344115
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=394C334E6308D50C0A495E9E%40AdobeOrg&d_nsid=0&ts=1677071344115
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=394C334E6308D50C0A495E9E%40AdobeOrg&d_nsid=0&ts=1677071344115 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.lyca-mobile.no
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-1-v046-0bf7d8264.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=394C334E6308D50C0A495E9E%40AdobeOrg&d_nsid=0&ts=1677071344115
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=37715124848905594011700247197447328532; Max-Age=15552000; Expires=Mon, 21 Aug 2023 13:09:04 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: DpCW2bnbRKs=
Content-Length: 0
Connection: keep-alive
www.googletagmanager.com/gtm.js?id=GTM-PNQZL82
200 OK 92 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PNQZL82
IP
File type Unicode text, UTF-8 text, with very long lines (43114)
Hash 59c52e0ba2315cd1bb54673cded8a207
d88124fc6e8b30fd8858501e34a668abace0dbb7
3156cc63467ed40a5d3b7ebe18086116aca7392f02c1de8c29aaec55853d5f84
GET /gtm.js?id=GTM-PNQZL82 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 22 Feb 2023 13:09:04 GMT
expires: Wed, 22 Feb 2023 13:09:04 GMT
cache-control: private, max-age=900
last-modified: Wed, 22 Feb 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 91903
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05101008/logo-new-br.svg
200 OK 3.9 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05101008/logo-new-br.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (3871), with no line terminators
Hash 600e6fd78377375dfc3cc9b9dadbfdfa
e3bb1098f191d2f9bc63a6402f5ae40d80edcd2c
b5260409c7187bbfd8d84eccf7bf1ccf96644798946c228af252775f7cb0cc13
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05101008/logo-new-br.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: kCjWuuLd+QBJXFpC2PJuiQ9+AuyaJEWEQQ9Ll5ZFXMLs7Tw2eIqAH4m8VOGLg2dcaHHBXCyuYpE=
x-amz-request-id: EK0WREWRF8F94QZT
Date: Wed, 22 Feb 2023 13:09:05 GMT
Last-Modified: Thu, 06 Jan 2022 06:57:00 GMT
ETag: "600e6fd78377375dfc3cc9b9dadbfdfa"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 3871
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 67d0353e59411ba1f85c492efa548d94
2bb48dd2638abb14217de43ca03d2485a31eb7e7
c50c81dc979238b0bfea29f69cc5b4e6277e06c407025412430c190acf1e8d29
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/fonts/RobotoCondensed-Regular.ttf
200 OK 170 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/fonts/RobotoCondensed-Regular.ttf
IP
File type TrueType Font data, 18 tables, 1st "GDEF", 26 names, Macintosh, Copyright 2011 Google Inc. All Rights Reserved.Roboto CondensedRegularVersion 2.137; 2017RobotoC\012- data
Size 170 kB (170284 bytes)
Hash a5a6b71255dc832da585d5c94fa1a115
6a632e0244ae68e70aeb8c8a5d3b360e1648712b
6a2cfb7e61dd09d77526fd314b256894094f96e3a6f3149d9f8000c1132ef4b8
GET /wp-content/themes/Divi-child/fonts/RobotoCondensed-Regular.ttf HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/vnd.ms-opentype
Content-Length: 170284
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Max-Age: 3000
Last-Modified: Tue, 27 Aug 2019 08:27:32 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 22 Feb 2023 00:29:04 GMT
Cache-Control: 2592000
ETag: "a5a6b71255dc832da585d5c94fa1a115"
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: qeu6l1K8Ps-PDISs4_xhtE-3H7jPh-XVPJPm0KbWXWwNwsvljeug-w==
Age: 45601
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/fonts/RobotoCondensed-Bold.ttf
200 OK 170 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/fonts/RobotoCondensed-Bold.ttf
IP
File type TrueType Font data, 18 tables, 1st "GDEF", 26 names, Macintosh, Copyright 2011 Google Inc. All Rights Reserved.Roboto CondensedBoldRoboto Condensed BoldVersion \012- data
Size 170 kB (169800 bytes)
Hash 36b5da0333389306669655a13f2209ad
8354979a1c3d7911df925e3b57d8c99398d54020
03b4e8042b9af4bf3349428fa734ed583f2d5d83287e1f42cf4d514c909146ef
GET /wp-content/themes/Divi-child/fonts/RobotoCondensed-Bold.ttf HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/vnd.ms-opentype
Content-Length: 169800
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Max-Age: 3000
Last-Modified: Tue, 27 Aug 2019 08:27:32 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 22 Feb 2023 00:29:05 GMT
Cache-Control: 2592000
ETag: "36b5da0333389306669655a13f2209ad"
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9AO3qeYVve-jXlcpCn_6J3gt_-pTXdo1zUqgEI_51dFi7rAomXUqKg==
Age: 45600
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/font-awesome/fonts/fontawesome-webfont.woff2?v=4.6.3
200 OK 72 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/font-awesome/fonts/fontawesome-webfont.woff2?v=4.6.3
IP
File type Web Open Font Format (Version 2), TrueType, length 71896, version 4.393\012- data
Hash e6cf7c6ec7c2d6f670ae9d762604cb0b
97e438cc545714309882fbceadbf344fcaddcec5
7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73
GET /wp-content/themes/Divi-child/vendor/font-awesome/fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 71896
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:36:05 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Max-Age: 3000
Last-Modified: Tue, 27 Aug 2019 08:27:43 GMT
ETag: "e6cf7c6ec7c2d6f670ae9d762604cb0b"
Cache-Control: 2592000
Accept-Ranges: bytes
Server: AmazonS3
Vary: Origin
X-Cache: Hit from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jm1m4mmTDY6koOpix-F-kx00kLa1gx7l9vNQ_synOWJ5R_tmU4ZQ7A==
Age: 45180
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/linear-icons/Linearicons-Free.woff2?w118d
200 OK 22 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/linear-icons/Linearicons-Free.woff2?w118d
IP
File type Web Open Font Format (Version 2), TrueType, length 21780, version 1.0\012- data
Hash 03e91f122aa5fd425abbe23c85546eb0
c87a3db06c5db4e75e639382f174eafa439aeb27
296945e5922e764eef17b1b4a3ee3e60dc202b3c7f074150b62158915bf74e33
GET /wp-content/themes/Divi-child/vendor/linear-icons/Linearicons-Free.woff2?w118d HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 21780
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:36:04 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Max-Age: 3000
Last-Modified: Tue, 27 Aug 2019 08:27:44 GMT
ETag: "03e91f122aa5fd425abbe23c85546eb0"
Cache-Control: 2592000
Accept-Ranges: bytes
Server: AmazonS3
Vary: Origin
X-Cache: Hit from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: yg00Fxsxd2NZctueTrtwxp5Q2q2q9Tf4UIrkqOmWVEs0I9U6OF9kYQ==
Age: 45181
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/08/30120503/germ-one.svg
200 OK 2.0 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/08/30120503/germ-one.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 27398d9974a03682bca55a5d1c83cfc0
011509bac7ec598f0ba6ff215d92487fc8965bac
28a2f89175ec3599ef375767ea6996f5bb73d38e5a54025deb7f0370505c382f
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/08/30120503/germ-one.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: j/JbFKHOnD4oASzcQiFTyl7ELZSjUADTRjSxBQt/IHMhhznboZf8cgJrwM9RSYf2fMZcBiFa8AI=
x-amz-request-id: EK0WQ6B5MA12A2E8
Date: Wed, 22 Feb 2023 13:09:05 GMT
Last-Modified: Thu, 30 Aug 2018 12:03:58 GMT
ETag: "27398d9974a03682bca55a5d1c83cfc0"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Fri, 30 Aug 2019 12:05:03 GMT
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 2016
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/core/admin/fonts/modules.ttf
200 OK 83 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi/core/admin/fonts/modules.ttf
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, modules \012- data
Hash 87a9fcfa516cd7576d52480b0bb21dae
7b2b31c6f1e91d53b76daad7fedea802592e4da4
c683211e591f2048ec4a840586e4f849894c8a57c147f23d7b5652d61c1260e2
GET /wp-content/themes/Divi/core/admin/fonts/modules.ttf HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/vnd.ms-opentype
Content-Length: 82920
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, HEAD
Access-Control-Max-Age: 3000
Last-Modified: Tue, 27 Aug 2019 08:27:45 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 22 Feb 2023 00:29:05 GMT
Cache-Control: 2592000
ETag: "87a9fcfa516cd7576d52480b0bb21dae"
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lYeVn9nkqEp9axKCvLms3COhygKw-JHJa_L_wRugaCcfn3em2ly_Jg==
Age: 45600
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/06075441/thumbnail_livechat-home-new.png
200 OK 4.6 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/06075441/thumbnail_livechat-home-new.png
IP
File type PNG image data, 169 x 101, 8-bit/color RGBA, non-interlaced\012- data
Hash 997934aedeaea00686b8b3ddae955e3f
6f1ab00c2308c25108bd68368cbacfc6410bdc43
d9d42de448b8e9c5ba116ccd270456367179a295167174953421fafafb5a932b
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/06075441/thumbnail_livechat-home-new.png HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: iz34gnd1M5KdbCpE6r6DJtD79m4kmPIHhI/0BqvyJQwsfInOaTVLgEvqaq0CCnHoZTTemgtww3U=
x-amz-request-id: EK0GN8ASHFKM1BPD
Date: Wed, 22 Feb 2023 13:09:05 GMT
Last-Modified: Wed, 06 Oct 2021 07:51:37 GMT
ETag: "997934aedeaea00686b8b3ddae955e3f"
Cache-Control: max-age=31536000
Expires: Thu, 06 Oct 2022 07:54:41 GMT
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 4589
dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=394C334E6308D50C0A495E9E%40AdobeOrg&d_nsid=0&ts=1677071344115
200 OK 124 B URL HTTP/1.1 dpm.demdex.net/id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=394C334E6308D50C0A495E9E%40AdobeOrg&d_nsid=0&ts=1677071344115
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 1f6783349ac4177ec3b3845fd520dca6
d84e7a43a8c8ff6f1a568ad6cb4162767f5b32b7
64bc30aa6a9d9e5396bb67c6af32c31f5ca6610641f0bdea10d759281df6adca
GET /id/rd?d_visid_ver=5.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=394C334E6308D50C0A495E9E%40AdobeOrg&d_nsid=0&ts=1677071344115 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Content-Type: application/x-www-form-urlencoded
Referer: https://www.lyca-mobile.no/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.lyca-mobile.no
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-1-v046-03cf679dc.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-Error: 172
X-TID: H3hVWLnbQJA=
Content-Length: 124
Connection: keep-alive
s3-eu-central-1.amazonaws.com/lycamobilespain-website/lycamobile-es-cms/wp-content/uploads/2018/06/25105546/activate-your-sim.svg
200 OK 1.9 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobilespain-website/lycamobile-es-cms/wp-content/uploads/2018/06/25105546/activate-your-sim.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1914), with no line terminators
Hash f6081e075c11d4ee9be3b614cdcab433
5b46fc85e5698f59567f0446251f52e1207e8d72
6369d8666187a0119acd2ad3f3bff8472f2cc720649cfa8966fc23719078dd39
GET /lycamobilespain-website/lycamobile-es-cms/wp-content/uploads/2018/06/25105546/activate-your-sim.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 5CQSfOtbHKyoZxjcOjHfJKi9hToMpeyhxJFaOGmhnSI2cjHXonR4lb593ebJNMz9ktI5mT2OkLE=
x-amz-request-id: EK0GPSAB1WQY8N1C
Date: Wed, 22 Feb 2023 13:09:05 GMT
Last-Modified: Mon, 16 Jul 2018 16:00:42 GMT
ETag: "f6081e075c11d4ee9be3b614cdcab433"
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 1914
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/quick-topup.svg
200 OK 794 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/quick-topup.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (568)
Hash cf1e3a7aa04f38e1620d798558f2d606
2c9ad3c5756a3992d80838aea679b7d13fe2e17b
aa9f77e1ebcb1a541bf88994cecc556f52cf27c8176ee8ae14789f38ff55de84
GET /wp-content/themes/Divi-child/img/quick-topup.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Content-Length: 794
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:38 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 22 Feb 2023 00:29:07 GMT
Cache-Control: 2592000
ETag: "cf1e3a7aa04f38e1620d798558f2d606"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zxjYrHNMOQ5YLMaxmHs52SzWS9yLjkDuW_T6ADElRSzuYs5ULgh5tw==
Age: 45598
d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/rocket-lazy-load/assets/js/12.0/lazyload.js
200 OK 3.6 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/plugins/rocket-lazy-load/assets/js/12.0/lazyload.js
IP
File type ASCII text, with very long lines (351)
Hash 34426cd9e75961497d5d5ef823de13b5
248013684da80787cc3f2b0b5d24c2cb85a47519
3bd5cb487c865f1b37252e5e9b6b68324d007c7e601ebccd535d57c4bec38d8d
GET /wp-content/plugins/rocket-lazy-load/assets/js/12.0/lazyload.js HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 06 Aug 2020 03:33:50 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:28:34 GMT
ETag: W/"cf8ac4ac2ca82499efb266472e0ad291"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: z8k0JMh4OlqrE-7OBA5UabP6Awhi44qr4-VUoxI24FiMnrvBs5kxRw==
Age: 45630
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/buy-bundles.svg
200 OK 525 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/buy-bundles.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 089df5ad1f13ed4a67ba8ed563f2fb7a
49a349c8d3912f6c9ef5db1519a76519f890b934
0064959abecb0e9b2ec31a3ef0e7560bcc6ecd0dc246374e49dd674ae6e510b6
GET /wp-content/themes/Divi-child/img/buy-bundles.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:41 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:33 GMT
ETag: W/"5fb98b5d9331ffac000aa38ccddcc058"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 8V5w5yn8n-50SfH13m6yrhd2dZKMKVo9WumV-CkKTxpc3BvQvi7ViA==
Age: 45564
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/faq.svg
200 OK 790 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/faq.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c152dd07a1a6fe2c15c74ff8423d8879
9f6ef66fa5eeac1d136953629cb1d81a31465583
732e219e66185a10753310a8133f101e6608fb0fb5eb956130e836359a2a869d
GET /wp-content/themes/Divi-child/img/faq.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:41 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:36 GMT
ETag: W/"6f426cc5e8b051ff22516894f385ff7b"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: g5C-Sc378Wq13my9QFWF9xRRuZxlUBKF8wFC07wV9C4tJPPh-Qa1vQ==
Age: 45564
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/roaming.svg
200 OK 1.2 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/roaming.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1367ac9eb96056593061732152d7a7da
cc608f4364f6e425d872bb0dfa83c942990f581a
27667fb1a31310628865b8f524731da9f9dfc511fa3e6945fad5478f0704ac7f
GET /wp-content/themes/Divi-child/img/roaming.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:41 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:38 GMT
ETag: W/"babdb0858ab2d63fb92348873cb8ddba"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: V4ZUmsy94f4BEiptPc1X520hTUoKZ-O3qUXA8Rcx0YbElGJ4yh4xtA==
Age: 45564
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/international-1.svg
200 OK 2.0 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/international-1.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 14e77fd8b12a454bc637a62f056ad277
35658c36689f6b56800af85862e63ebaab63da4a
ecd6617d70ccf26f51c4287d2e870d0c701d6daa44bb31e6f698960a2a052bdb
GET /wp-content/themes/Divi-child/img/international-1.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:27:37 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Wed, 22 Feb 2023 00:29:07 GMT
Cache-Control: 2592000
ETag: W/"5056ce6c6883a123509cb1cca4031429"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9YxITCx8peA7ANzRQKkwvJvQKJ3M37SBOJ-1V4k-H40llcmBbNijFA==
Age: 45598
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/store-locator.svg
200 OK 958 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/store-locator.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash e21443e37ca744aa7d29d2829b46591a
ca3158f56f1c6e1de9564583c398e78d097ed4c4
d07b478885d58c759e9494a4756dbec42b616fc46a14d5b5eed6bbc0dae35352
GET /wp-content/themes/Divi-child/img/store-locator.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Content-Length: 958
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:41 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:39 GMT
ETag: "e21443e37ca744aa7d29d2829b46591a"
Cache-Control: 2592000
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: r0tscsOOVGKJ7NdgHM-Xrb7PybV1KRHwLmVT-oXuJw2n_lgFz9E2mA==
Age: 45564
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/mobile-settings.svg
200 OK 1.3 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/mobile-settings.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1e931126bb6ed247dc43856f79622939
daec034c42916db88cf460e3c02a7b36fa948218
868bd8a1246472dbaf9d15d487ae46d37e449685ae8ba164e174ac4e23dfd822
GET /wp-content/themes/Divi-child/img/mobile-settings.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:41 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:37 GMT
ETag: W/"94e63e235909be075a2884c96906c941"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: x7X6nDuIqUKIuQ7h231ynyvQQgsU5OiHi8qxqArbKljJ1144uHf1rw==
Age: 45564
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/contactus.svg
200 OK 646 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/contactus.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b127a283d70bf1c4ecbfab932da2aa69
90be95e05ee092b3b78059ec4d8451468c0f3b64
9d9ef67ed9cdf2eae32c4f8ffb5a1c154501573a36d37bfd0ca910e1e8ae5ca2
GET /wp-content/themes/Divi-child/img/contactus.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:41 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:36 GMT
ETag: W/"be5d61340a17d803b181cf8d2cee077c"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9gJfgToyJl3bPUCJreDNquNKkKrUUvySNSrTb6YFV_xTz8yVUzupqA==
Age: 45564
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/favicon.ico
200 OK 1.2 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/img/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 2eed3e79d00bb4bc002d5cff16db207b
dc4cdaf71a4d8fa44eabfe5530403988de1d2bf8
0ed56bfe2a738fc69afc0c991d8c65abe9f5a2204c9a44fa0570e5bd8e47466f
GET /wp-content/themes/Divi-child/img/favicon.ico HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/x-icon
Content-Length: 1150
Connection: keep-alive
Last-Modified: Mon, 18 Oct 2021 07:31:03 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 22 Feb 2023 00:30:24 GMT
ETag: "2eed3e79d00bb4bc002d5cff16db207b"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: qgR7MYpL6wQhh0FwIYYI3Mc4qVqNAF8k_4h5VRe9gJtcULl2HiKb0Q==
Age: 45521
www.lyca-mobile.no/wp-content/uploads/json_uploads/errorhandle.json
200 OK 4.1 kB URL HTTP/2 www.lyca-mobile.no/wp-content/uploads/json_uploads/errorhandle.json
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (1442)
Hash 9c8e140cc95739dfbfa7e6bb132e890c
6995f8ca8d9fb5a68cd8fae4460502bc73fa2c92
3906c7164353e4321efbc4637888bd17c95938e6329f2df1f19c444350f7bbad
GET /wp-content/uploads/json_uploads/errorhandle.json HTTP/1.1
Host: www.lyca-mobile.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/nb/bundle/lyca-smart-l/?utm_source=Selectivv&utm_medium=banner&utm_campaign=CNOR4001CAO0223HNL1PRGDUT&utm_term=P5&user_id=63f613eef8d65f0001b92a0c&cmpid=637fb0f9010e700001e597f3&rtkcid=63f613eef8d65f0001b92a0c
Cookie: SSESS8b10154026bedacd8362ddcf85d89291=s7u8jg03c14qojkifb38e1271v; newsim_tab=0; AMCV_394C334E6308D50C0A495E9E%40AdobeOrg=1176715910%7CMCIDTS%7C19411%7CvVersion%7C5.4.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Feb 2023 13:09:04 GMT
content-type: application/json
content-length: 4099
server: Apache
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=300; includeSubdomains;
vary: User-Agent,X-Forwarded-Proto
last-modified: Thu, 17 Jun 2021 16:25:58 GMT
accept-ranges: bytes
x-xss-protection: 1; mode=block
access-control-allow-origin: *
X-Firefox-Spdy: h2
consent.cookiebot.com/uc.js
200 OK 32 kB URL HTTP/2 consent.cookiebot.com/uc.js
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65499)
Hash ca644678e367fcf964fc01f3a24169aa
a526eb8a30c057085dafe6fa23933c27ec9d9a6d
4c88b848076a643a03a0ef09d8407497845b890c5cae1de62025e79248f2168e
GET /uc.js HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-encoding: gzip
last-modified: Sun, 29 Jan 2023 10:39:43 GMT
accept-ranges: bytes
etag: "f51f6bffcd33d91:0"
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 32026
cache-control: public, max-age=740
expires: Wed, 22 Feb 2023 13:21:24 GMT
date: Wed, 22 Feb 2023 13:09:04 GMT
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102144/header-twitter-new.svg
200 OK 15 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102144/header-twitter-new.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (20393)
Hash 1b0607b1b648a1f756b1419bbbfaacd9
fd5d74112b7172baffc62e024b91f398f0d280cd
2fedb7c9aad7c7e9473f4ce37fe4ffb0f23ed83dbc188a14aad73de5e858e542
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102144/header-twitter-new.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: YMd3+RLPvXtpXA+b0EU3FCLKM/GSCTpzGUG/Y5WNwYBVEWiCQJVVRMdstvp3mljKZnqSVRjqgIM=
x-amz-request-id: EK0Z5QE6KB3NCMAE
Date: Wed, 22 Feb 2023 13:09:05 GMT
Last-Modified: Tue, 05 Oct 2021 10:18:42 GMT
ETag: "1b0607b1b648a1f756b1419bbbfaacd9"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Wed, 05 Oct 2022 10:21:44 GMT
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 15288
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102139/header-fb-new.svg
200 OK 8.4 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102139/header-fb-new.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (11262)
Hash 852b81efbbae0dcfd857f87d6c98189a
d8022ff32daac638cb94b4bd15ec7e7891eaefcb
58480bbcf53220a5a596bebc793c65cd7a22b77f49e4329c0f5f7c8ed8da125a
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102139/header-fb-new.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: H/dtKhBzouahqjHLju1WyDjSNcYDWkSycQbcvqPmf9/0UWth3yhxUUTw4GfgcDXOmyYtsDm5eYs=
x-amz-request-id: EK0PYA6WPM68SVSP
Date: Wed, 22 Feb 2023 13:09:05 GMT
Last-Modified: Tue, 05 Oct 2021 10:18:37 GMT
ETag: "852b81efbbae0dcfd857f87d6c98189a"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Wed, 05 Oct 2022 10:21:39 GMT
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 8393
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102142/header-insta-new.svg
200 OK 18 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102142/header-insta-new.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (23958)
Hash 9a55d81cd439e49798109bd463dd1f1b
1afef555c1541124cc9b6c85ae258a72b6818ec1
61f9f838ab4dd5a633b7ae5329af4d2acae8045d2e0e667fd73a3f116b00dab6
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102142/header-insta-new.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: VRh+dVZoejLvhSYwRQ7m9GMulG/Mh3RurQEvuw2TEX8dm8ajCUlt4aeWl4mj7wiQFabbU3PGNY4=
x-amz-request-id: EK0X6NYG5DPYNZ13
Date: Wed, 22 Feb 2023 13:09:05 GMT
Last-Modified: Tue, 05 Oct 2021 10:18:40 GMT
ETag: "9a55d81cd439e49798109bd463dd1f1b"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Wed, 05 Oct 2022 10:21:42 GMT
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 17998
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/07072809/breadcrumb_newbrand_be.png
200 OK 24 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/07072809/breadcrumb_newbrand_be.png
IP
File type PNG image data, 1920 x 140, 8-bit/color RGB, non-interlaced\012- data
Hash ad2b8da460e7f9706da7008773b132b3
5f7ddfbb68f26ba1fb5f0769dca8f88bc01d7829
a55b84d8174fc43917cae9c623df2b1758d7c05493b0881252a55ca87dcfdbf0
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/07072809/breadcrumb_newbrand_be.png HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: VPnCeyYMrusJTI4U/ChDJdpX0ayxAbTJ/ketlkwfx+42pEQHNYdyg1WO9UrnVGRE+t4bx2KyTUs=
x-amz-request-id: F17Y3TQBYNQX02Y0
Date: Wed, 22 Feb 2023 13:09:06 GMT
Last-Modified: Thu, 07 Oct 2021 07:25:03 GMT
ETag: "ad2b8da460e7f9706da7008773b132b3"
Cache-Control: max-age=31536000
Expires: Fri, 07 Oct 2022 07:28:09 GMT
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 23600
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102146/header-youtube-new.svg
200 OK 18 kB URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102146/header-youtube-new.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (24655)
Hash 74d50291fad9e577ecbde522f9882145
7dcf477169f8d5a1d0ee5dd970c10da54cde13f1
a9fc0811ec1d0594b50275f6bb1e275a61144d25f8885333fd5172d34b7f8655
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/05102146/header-youtube-new.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: UHkB63G3RD7C0OPudWKDOdxc/fVOqhMjQel3RB/8f4uc45qsJTr+t5sSctHo1yVT+5B98Y8vGuY=
x-amz-request-id: F17G859T2Q7GQHBZ
Date: Wed, 22 Feb 2023 13:09:06 GMT
Last-Modified: Tue, 05 Oct 2021 10:18:44 GMT
ETag: "74d50291fad9e577ecbde522f9882145"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Wed, 05 Oct 2022 10:21:46 GMT
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 18504
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 99833367490dd4a0b1fe074db23fbaa0
f5195f40f27dc45e7dfc323a8f5e0c546be2f6ca
0e4a4c91d19b35385a72a41c0b2b9bf64ec4e9b064c6230de863985d935239c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
11029147.fls.doubleclick.net/activityi;src=11029147;type=invmedia;cat=nolyc0;ord=4174465868660;gtm=45He32f0;auiddc=472649691.1677071345;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c?
200 OK 376 B URL HTTP/2 11029147.fls.doubleclick.net/activityi;src=11029147;type=invmedia;cat=nolyc0;ord=4174465868660;gtm=45He32f0;auiddc=472649691.1677071345;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (696), with no line terminators
Hash db2602d889279ed1fd10bc5b5fd74030
bb2f6edd5463973c577e6e51de7457216ed80acb
74d219bcdaa679d84ac8b92fd46cb743cdabbb7371584675289f556b34af35ac
GET /activityi;src=11029147;type=invmedia;cat=nolyc0;ord=4174465868660;gtm=45He32f0;auiddc=472649691.1677071345;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c? HTTP/1.1
Host: 11029147.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 22 Feb 2023 13:09:05 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 376
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 22-Feb-2023 13:24:05 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/11065021/european-union_new.svg
200 OK 726 B URL HTTP/1.1 s3-eu-central-1.amazonaws.com/lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/11065021/european-union_new.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (2193), with no line terminators
Hash 300ca84c801a3dff40b9f85bd024669a
d6a6b760a33b8db7e552cb63ad7ca064ef4fae70
9de40f884583d6bc5bbd40bd5b74d0b20c853538aa6a3fabf4144c23ef674983
GET /lycamobile-norway-website/lycamobile-nor-cms/wp-content/uploads/2018/06/11065021/european-union_new.svg HTTP/1.1
Host: s3-eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: M93j6FAGWifTLMFG1cjsEO7ZWWSe4UnjTr961uXNg9K9YBY0C8Lll7AUjrN735SMoLv9oBGfdJk=
x-amz-request-id: F17RGQ4CNK92FNTA
Date: Wed, 22 Feb 2023 13:09:06 GMT
Last-Modified: Mon, 11 Oct 2021 06:50:14 GMT
ETag: "300ca84c801a3dff40b9f85bd024669a"
Cache-Control: max-age=31536000
Content-Encoding: gzip
Expires: Tue, 11 Oct 2022 06:50:21 GMT
Accept-Ranges: bytes
Content-Type: image/svg+xml
Server: AmazonS3
Content-Length: 726
ocsp.digicert.com/
200 OK 312 B IP
Hash 89d4e1d171c6fb00b2ca535bac305358
f2bd41d3430687eaeb3f06073e020993288e540d
8d4489123d6731f990ff345248cd5ab71f49dc7c1cc4790a0c1f3c45d59f4b30
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4402
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:05 GMT
Last-Modified: Wed, 22 Feb 2023 11:55:44 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 312
consent.cookiebot.com/96a1d7e4-5650-4b38-a86a-76e9471fade7/cc.js?renew=false&referer=www.lyca-mobile.no&dnt=false&init=false
200 OK 57 kB URL HTTP/2 consent.cookiebot.com/96a1d7e4-5650-4b38-a86a-76e9471fade7/cc.js?renew=false&referer=www.lyca-mobile.no&dnt=false&init=false
IP
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65499)
Hash 26842050d672e15370fd15fc4be8742d
28a24c788871409107c8835f4bef7ed1fed2304f
dfdf06830798b2d2a6bdd9f00ab59c0c608e338e47e5a1806885064c8ddfe14b
GET /96a1d7e4-5650-4b38-a86a-76e9471fade7/cc.js?renew=false&referer=www.lyca-mobile.no&dnt=false&init=false HTTP/1.1
Host: consent.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: private, max-age=1200
content-type: application/x-javascript; charset=utf-8
content-encoding: gzip
last-modified: Wed, 22 Feb 2023 13:09:05 GMT
vary: Accept-Encoding
request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef
access-control-expose-headers: Request-Context
content-length: 56842
date: Wed, 22 Feb 2023 13:09:05 GMT
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2
lycamobileuk.sc.omtrdc.net/id?d_visid_ver=5.4.0&d_fieldgroup=MC&mcorgid=394C334E6308D50C0A495E9E%40AdobeOrg&ts=1677071345024
200 OK 2 B URL HTTP/2 lycamobileuk.sc.omtrdc.net/id?d_visid_ver=5.4.0&d_fieldgroup=MC&mcorgid=394C334E6308D50C0A495E9E%40AdobeOrg&ts=1677071345024
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /id?d_visid_ver=5.4.0&d_fieldgroup=MC&mcorgid=394C334E6308D50C0A495E9E%40AdobeOrg&ts=1677071345024 HTTP/1.1
Host: lycamobileuk.sc.omtrdc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.lyca-mobile.no
access-control-allow-credentials: true
date: Wed, 22 Feb 2023 13:09:05 GMT
p3p: CP="This is not a P3P policy"
server: jag
vary: Origin
content-type: application/x-javascript;charset=utf-8
content-length: 2
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
12701373.fls.doubleclick.net/activityi;src=12701373;type=invmedia;cat=allus0;ord=1;num=4045038260184;gtm=45He32f0;auiddc=472649691.1677071345;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c?
200 OK 385 B URL HTTP/2 12701373.fls.doubleclick.net/activityi;src=12701373;type=invmedia;cat=allus0;ord=1;num=4045038260184;gtm=45He32f0;auiddc=472649691.1677071345;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (702), with no line terminators
Hash bfa86abd9d7d261a3b161f3583893e9e
5f5489e5e9ab49b2784ae8ed2f70d73a524857fc
cc50462f3ac062397c1b2b0047d60552886991929b30c8abe116d8ef5ea879d0
GET /activityi;src=12701373;type=invmedia;cat=allus0;ord=1;num=4045038260184;gtm=45He32f0;auiddc=472649691.1677071345;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c? HTTP/1.1
Host: 12701373.fls.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 22 Feb 2023 13:09:05 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
strict-transport-security: max-age=21600
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 385
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 22-Feb-2023 13:24:05 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 62b94c4c909fae40d2ac24eb89183aee
a7fd0d2a00a01b3702ad6be4bd434ae5aa4cd931
0c989a2b31ea27342cf87dcdd448d19d2f950407518f478f3fa1a6654c259ece
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 13:09:05 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 20 Feb 2023 00:02:11 GMT
Expires: Mon, 27 Feb 2023 00:02:10 GMT
Etag: "a7fd0d2a00a01b3702ad6be4bd434ae5aa4cd931"
Cache-Control: max-age=384184,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79d7f44359dfb50c-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d257f4d6e99c09262e3ac58fd5e130ce
2fee577cedee661127ca0b89d4f42a0e064e0d27
a2932f2c323a100c0b574e3b428b0d3115a8a90ae20c005d6d1fe1a559bd7976
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 22 Feb 2023 13:09:05 GMT
Last-Modified: Wed, 22 Feb 2023 12:30:43 GMT
Server: ECS (nyb/1D0A)
X-Cache: Miss from cloudfront
Via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: hLPRcNi0I7oPQzeOZOD5NQBZ5HQdQa1IYtA9z-Czw5MEA2fzVjFM7g==
Age: 2302
lycamobileuk.sc.omtrdc.net/id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=394C334E6308D50C0A495E9E%40AdobeOrg&mid=26354380858154095546612867351456846392&ts=1677071345363
200 OK 2 B URL HTTP/2 lycamobileuk.sc.omtrdc.net/id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=394C334E6308D50C0A495E9E%40AdobeOrg&mid=26354380858154095546612867351456846392&ts=1677071345363
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=394C334E6308D50C0A495E9E%40AdobeOrg&mid=26354380858154095546612867351456846392&ts=1677071345363 HTTP/1.1
Host: lycamobileuk.sc.omtrdc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.lyca-mobile.no
access-control-allow-credentials: true
date: Wed, 22 Feb 2023 13:09:05 GMT
p3p: CP="This is not a P3P policy"
server: jag
vary: Origin
content-type: application/x-javascript;charset=utf-8
content-length: 2
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
tracker.selectivv.com/uniclick.js?defaultcampaignid=620d05b69b851500013fe531&attribution=lastpaid®viewonce=false&cookiedomain=lyca-mobile.no&cookieduration=30
200 OK 5.1 kB URL HTTP/1.1 tracker.selectivv.com/uniclick.js?defaultcampaignid=620d05b69b851500013fe531&attribution=lastpaid®viewonce=false&cookiedomain=lyca-mobile.no&cookieduration=30
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash ac15c7b6f23940f9a7cba609b52dc3c4
43e187364df6bd04fa69dfd4a636394ea7fa329d
bd60f2d0864c72e3856bd25bfc4df89fecceb34a490e4a666bfda5dd00a7c833
GET /uniclick.js?defaultcampaignid=620d05b69b851500013fe531&attribution=lastpaid®viewonce=false&cookiedomain=lyca-mobile.no&cookieduration=30 HTTP/1.1
Host: tracker.selectivv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 22 Feb 2023 13:09:05 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d257f4d6e99c09262e3ac58fd5e130ce
2fee577cedee661127ca0b89d4f42a0e064e0d27
a2932f2c323a100c0b574e3b428b0d3115a8a90ae20c005d6d1fe1a559bd7976
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 22 Feb 2023 13:09:05 GMT
Last-Modified: Wed, 22 Feb 2023 12:49:21 GMT
Server: ECS (nyb/1D07)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9DvTt-_0uFRDbYdAvno9VkhMsR1cmxc6YsOXkW7WZ6N1cb4cFxDtQg==
Age: 1184
consentcdn.cookiebot.com/sdk/bc-v4.min.html
200 OK 392 B URL HTTP/2 consentcdn.cookiebot.com/sdk/bc-v4.min.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (627), with no line terminators
Hash e7268eccad39bd651697fa793a52cc5c
47299cefa2397b0c1d0c5bf232390a5cf1bcc4d3
907e16c84d35556e4ed841a3511915e6d4bb4e9d68cfca178a740e90b4d80e35
GET /sdk/bc-v4.min.html HTTP/1.1
Host: consentcdn.cookiebot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: text/html
etag: "3d08665fa4c7bcf9fa2dcbbc7efe1d0f:1649057029.895163"
last-modified: Mon, 04 Apr 2022 07:23:49 GMT
server: AkamaiNetStorage
x-akamai-transformed: 9 - 0 pmb=mRUM,1
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=29771517
expires: Fri, 02 Feb 2024 03:01:02 GMT
date: Wed, 22 Feb 2023 13:09:05 GMT
content-length: 392
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="465853_388255644_513389797_52_641_1_0";dur=1
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05104722/Belgium1.png
200 OK 3.1 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05104722/Belgium1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 05b0430105aa244028af3d4812cfa862
9eab0b05bd6168d57cce062705562be4feb82f6f
58c034ac6bd3419e05ea16f2ebfbc4682fb594f29a4e2d5d794bcfec5b0993fb
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05104722/Belgium1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: Msn4on7NuQoUD0DzXimGmn+9ujnMmUjtt2pMTe0qcAFNlUhzkIwUkW/pOCZ0CnMiRdRs8h/JAwE=
x-amz-request-id: F17X6PS2E5Z6FBZ9
Date: Wed, 22 Feb 2023 13:09:06 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:28 GMT
ETag: "05b0430105aa244028af3d4812cfa862"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 10:47:22 GMT
x-amz-version-id: xPo84QQnS78MMDy3NywneivcwR8deWQC
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3134
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05105612/Bulgaria1.png
200 OK 3.6 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05105612/Bulgaria1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash a988ef19186744cb92fbb0b29fd46956
f44b4bca4cbeb6af59414d97e487de1177106ac5
c0a8e61b25f5d6a64c9f45deda84748f57d25db76108601fca0a705188664d3c
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05105612/Bulgaria1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 5KtpiL1I7lpXEKqJiQCkTTE5bv5rElDdxleYYHPDkpwir+vJueskeE0aAa6GWm/PGnj0wnrghYs=
x-amz-request-id: F17T2MRKERJNVYY1
Date: Wed, 22 Feb 2023 13:09:06 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:28 GMT
ETag: "a988ef19186744cb92fbb0b29fd46956"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 10:56:12 GMT
x-amz-version-id: rhxVu5a7c0dtIOfOVBZfLRNgZLQcxKbW
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3556
dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=394C334E6308D50C0A495E9E%40AdobeOrg&d_nsid=0&d_mid=26354380858154095546612867351456846392&ts=1677071345407
200 OK 307 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=5.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=394C334E6308D50C0A495E9E%40AdobeOrg&d_nsid=0&d_mid=26354380858154095546612867351456846392&ts=1677071345407
IP
File type JSON data\012- , ASCII text, with very long lines (364), with no line terminators
Hash 85bfd5d138cec6faab8ca154289bc679
717a23ba6d5124c95382ae7ea576a7b643e241f2
bb6761f2c72ce4c63849ceb0c57094cc8a38fb67264bbcdc22627dbb70be6abf
GET /id?d_visid_ver=5.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=394C334E6308D50C0A495E9E%40AdobeOrg&d_nsid=0&d_mid=26354380858154095546612867351456846392&ts=1677071345407 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.lyca-mobile.no
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-1-v046-0458b73b6.edge-irl1.demdex.com 2 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=30769884933498743286189286825901187890; Max-Age=15552000; Expires=Mon, 21 Aug 2023 13:09:05 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: 9u7BmGU2QwU=
Content-Length: 307
Connection: keep-alive
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05111007/Cyprus1.png
200 OK 7.8 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05111007/Cyprus1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash a07ecb819e9041e7aaa1ba734b925e10
3d0a03e7fb4b990a576f3ebe8d07d1cd58ccf0a1
5a7be5dbead23ec1820ad5e47695ccac7082151c22b119af4aa025b7c235596d
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05111007/Cyprus1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: nYepPt/oRUmeXTSo3n/kofj7gI5+/tD/9hPUkoDtWwxes2vw9zGZYhIsX+Rv/JINkVa5DJaXi6M=
x-amz-request-id: F17VRJBWJKRGJF2W
Date: Wed, 22 Feb 2023 13:09:06 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:32 GMT
ETag: "a07ecb819e9041e7aaa1ba734b925e10"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:10:07 GMT
x-amz-version-id: clCEU3GO5qQuk5QhAMDw0v0RnkhC3c6d
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 7763
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 99833367490dd4a0b1fe074db23fbaa0
f5195f40f27dc45e7dfc323a8f5e0c546be2f6ca
0e4a4c91d19b35385a72a41c0b2b9bf64ec4e9b064c6230de863985d935239c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112045/France1.png
200 OK 3.8 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112045/France1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash a77830776e897150a6ff71086e102b0d
d51b723d1070266baa7c5f7d7c848245791f7729
aef7056201ef0b57ad96204bca42e09d38886c1139ed77c6d4d102fcdac339fd
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112045/France1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: vSJBb/D4ToN3E8gCfNv5hnkiYgaNt9oLz/UwYsUdvDVmBl0VdlqXe8QKXstaEfxQcKYKyYqY6s8=
x-amz-request-id: F17HB1KYY881D97F
Date: Wed, 22 Feb 2023 13:09:06 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:32 GMT
ETag: "a77830776e897150a6ff71086e102b0d"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:20:45 GMT
x-amz-version-id: pu8R6M7CKxBCciwISencqH_AybVJLBjI
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3805
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112541/greece1.png
200 OK 4.4 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112541/greece1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 9f96f9ec7e6c20ae3e2fffad9e2d5935
d20f275da48cf934daae0622fba00ac789996576
a5bf00e8fce671f3814258643082db0739a309e5c4f9900e34e08eb12203ab14
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112541/greece1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 5+GUIKONYLrmrYzFZNWunA1X/hOKAhPUcnshUifPjEXJ06b4gSXj/rC1naUHKy3pmlgsucpXuPY=
x-amz-request-id: F17VK24Y2AQDER2J
Date: Wed, 22 Feb 2023 13:09:06 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:32 GMT
ETag: "9f96f9ec7e6c20ae3e2fffad9e2d5935"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:25:41 GMT
x-amz-version-id: Q7IT_DK9DqY8YXPoF3wYqidHHps8u5mo
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 4373
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5a9e54f54243639a31020050bfc7fb55
c49766d67bea2ce07bd3c925d42897ab992f94e2
26b96bbdd02ca9498d5c7a4b970ebbec31039db95a2ce6e5a6ff665c73023a8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d257f4d6e99c09262e3ac58fd5e130ce
2fee577cedee661127ca0b89d4f42a0e064e0d27
a2932f2c323a100c0b574e3b428b0d3115a8a90ae20c005d6d1fe1a559bd7976
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 22 Feb 2023 13:09:05 GMT
Last-Modified: Wed, 22 Feb 2023 11:46:11 GMT
Server: ECS (bsa/EB13)
X-Cache: Miss from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Avf4PWSqbyAUtW7MFJJ2s282HMVDUjU5DVHN1s418ZD4rwiiyWou4g==
Age: 4974
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05113518/Ireland1.png
200 OK 2.4 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05113518/Ireland1.png
IP
File type PNG image data, 128 x 128, 8-bit colormap, non-interlaced\012- data
Hash 43d299857d925a89b5e9d9ed735137e6
98dfeb70ca2e020803d0bce2b702762856c1bbe9
f3582ced229071311c510cec9ec473bc624d73866c637def53b9156c8e0007a3
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05113518/Ireland1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: Cb0cPKcCt2sptIl/yjHDOnYWw2+IEmhrvg/rABqBr73l0+5kclD0yMKg7gsCvvXfrbSXUb7xjJU=
x-amz-request-id: F17KX0QVE4VJNVWC
Date: Wed, 22 Feb 2023 13:09:06 GMT
Last-Modified: Wed, 14 Jul 2021 12:18:42 GMT
ETag: "43d299857d925a89b5e9d9ed735137e6"
x-amz-version-id: 144H9sB0.wvoZ7J_SgDb17LmdFMdZ4mk
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 2353
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5a9e54f54243639a31020050bfc7fb55
c49766d67bea2ce07bd3c925d42897ab992f94e2
26b96bbdd02ca9498d5c7a4b970ebbec31039db95a2ce6e5a6ff665c73023a8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05113718/Italy1.png
200 OK 3.8 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05113718/Italy1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 0f891a07f54e96ad26eab45eff4a4ac4
4216d39a4d5d857a5043a74344e38fae2d57cbb4
b8b8229f776ee43d90df36e703367c559bbb484b837e824b87cd0d0667f96f68
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05113718/Italy1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: YyTEjmlm/xBPOzZGVSxksApEnAs5XKqETYD0dVXF9NUUja43G57Z3ZW73W7BMXq3r5G6uYK60+U=
x-amz-request-id: F17ZCQFQQBKZTWPQ
Date: Wed, 22 Feb 2023 13:09:06 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:36 GMT
ETag: "0f891a07f54e96ad26eab45eff4a4ac4"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:37:18 GMT
x-amz-version-id: GTF1L1A9A6.2B4uTj.N2PdO2SsTH.sh1
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3807
adservice.google.com/ddm/fls/i/src=12701373;type=invmedia;cat=allus0;ord=1;num=4045038260184;gtm=45He32f0;auiddc=472649691.1677071345;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c
200 OK 385 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=12701373;type=invmedia;cat=allus0;ord=1;num=4045038260184;gtm=45He32f0;auiddc=472649691.1677071345;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (701), with no line terminators
Hash e29a680ed9214d20ae08d6db2a00b263
695c15dad54273f0b5dcf93b36aedc4eb9f7c7d7
2790b5e7696c855feb4615e05ba9d5509bda7f05cad53fabe5e63b5dab3bd7ec
GET /ddm/fls/i/src=12701373;type=invmedia;cat=allus0;ord=1;num=4045038260184;gtm=45He32f0;auiddc=472649691.1677071345;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://12701373.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 22 Feb 2023 13:09:05 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 385
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05114724/Latvia1.png
200 OK 3.8 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05114724/Latvia1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash b9c786d407210d6bc0c2a86265d9f7b0
beb959603fc7cb94368ac2b0db83d5157fc3ed59
88cbf9a06a0e429b27afe129c11e2668cf4dc3cf61918e25b717546ba5f74cc8
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05114724/Latvia1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 7x7OyDGyTrgHbsuGGhl/kKpz1IPew23NMPcgDF4BZvLMz0A3UQwM9LYJd2Bj3jwb50WXxnxOORY=
x-amz-request-id: F17MB8QY6V71YAN2
Date: Wed, 22 Feb 2023 13:09:06 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:36 GMT
ETag: "b9c786d407210d6bc0c2a86265d9f7b0"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:47:24 GMT
x-amz-version-id: hBXvw2q1TABuXXEllSZB6IP18vQ.9xX4
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3774
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d257f4d6e99c09262e3ac58fd5e130ce
2fee577cedee661127ca0b89d4f42a0e064e0d27
a2932f2c323a100c0b574e3b428b0d3115a8a90ae20c005d6d1fe1a559bd7976
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 22 Feb 2023 13:09:05 GMT
Last-Modified: Wed, 22 Feb 2023 12:25:11 GMT
Server: ECS (bsa/EB1A)
X-Cache: Miss from cloudfront
Via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Oki_LRjUB3NjKyzFAaxbud8XADANST43f9u2ZWPxx_F04OKpZGpetw==
Age: 2634
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05114956/Lithuania1.png
200 OK 3.9 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05114956/Lithuania1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 2bcea2869112db9a45348df3a5635c24
05f022a59b8e0a0973309ebceeef184f76387a81
f6b0d4241d0d93d79acb7f9037b4a279c28286fb30835b826afa11d2f486fdc7
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05114956/Lithuania1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: ls585eKY3KYLJHv58Th+VuxZosiE2Hd/FSYyidDtVo8dZAOpAnXAGccLaQ/y+kK0Nspsl3GkJIo=
x-amz-request-id: F17H0TFE4H6G4SCM
Date: Wed, 22 Feb 2023 13:09:06 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:36 GMT
ETag: "2bcea2869112db9a45348df3a5635c24"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:49:56 GMT
x-amz-version-id: QFPy2elHo6TU_9hmnKFhg_Ap__GibKsp
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3864
adservice.google.com/ddm/fls/i/src=11029147;type=invmedia;cat=nolyc0;ord=4174465868660;gtm=45He32f0;auiddc=472649691.1677071345;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c
200 OK 378 B URL HTTP/2 adservice.google.com/ddm/fls/i/src=11029147;type=invmedia;cat=nolyc0;ord=4174465868660;gtm=45He32f0;auiddc=472649691.1677071345;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (695), with no line terminators
Hash ad45a4e5d571b9a540234ac49b239bb5
1f3b8017ea1c76d9853bf82a1586df911dd742b5
472e41d62a69ac69ff76809a68cdd61c97d4331cd658d8968401e3f2749bb580
GET /ddm/fls/i/src=11029147;type=invmedia;cat=nolyc0;ord=4174465868660;gtm=45He32f0;auiddc=472649691.1677071345;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://11029147.fls.doubleclick.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 22 Feb 2023 13:09:05 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/html; charset=UTF-8
pragma: no-cache
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 378
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112017/Finland1.png
200 OK 3.6 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112017/Finland1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 5e1cfce111a4d74a372c674d4cc37413
83f346da964635dea608a27d54f85df4477e1fb9
618376f66c76753dbe413321c2600f615d7a86cad126b13f07878c0af4d554d7
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05112017/Finland1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: qeMkHAseXYfKWaR6v5nNl+d5tOV1+Jk2kuuaF0EgpEartz9XNksHM2GP6g3CK2FbiXnFPhVqoDs=
x-amz-request-id: F17WPJ9FGG6T2KWP
Date: Wed, 22 Feb 2023 13:09:06 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:32 GMT
ETag: "5e1cfce111a4d74a372c674d4cc37413"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:20:17 GMT
x-amz-version-id: OwXKXGP8WQZs7BHDS_f4YevL7kKbeDCt
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3636
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05115017/Luxembourg1.png
200 OK 3.9 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05115017/Luxembourg1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 3e651c805d98f379e5b0ad3576d5ee0b
a921beaf6a7a518db0d5a33b7367b77f0e1fa471
f0c25debbfdc38763304b11360d01fc4ac3c911e869f7af0c995842d611501ae
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05115017/Luxembourg1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: caK47MEMaR23/pj6bB9nakGF+KEb1JLsdL9Ns927EirJ9LvzKiEBtCEhtBOVkKf3uI2cQSDSBKs=
x-amz-request-id: F17T89AY96BENDTW
Date: Wed, 22 Feb 2023 13:09:06 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:36 GMT
ETag: "3e651c805d98f379e5b0ad3576d5ee0b"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:50:17 GMT
x-amz-version-id: 0cOqMsF0_Ak37NCNNGamM71CWdVZEacS
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3869
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05115743/Malta1.png
200 OK 4.3 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05115743/Malta1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash a83ad8aa720acb4451c0d59cd08c628f
086e729447dbc761c4b2561973314882a4d8cf7c
dda9ab435b2059745ebf794a823a6f72b2ffa34a18b178c5bdd9673b962baf12
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05115743/Malta1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: /QsFdQlOY5/wT530+H414WAZLVeVLfFUlTOO1AMllJoHGAqk1XRBDPc0DPqYRrNMPu0oAZeN/qw=
x-amz-request-id: F17M2JKCQDSRZQ60
Date: Wed, 22 Feb 2023 13:09:06 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:40 GMT
ETag: "a83ad8aa720acb4451c0d59cd08c628f"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:57:43 GMT
x-amz-version-id: rqG497F_yoU1eO77PnVOCv8uXhA_1r2V
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 4287
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05134701/Netherlands1.png
200 OK 3.8 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05134701/Netherlands1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash a19874c7d02744990237b827439132a4
d9a7a1eb5ee2e5a4dbbc75e43d7905b17ec0f6c0
e75bffa1dae0a23fa6d5cfa73835a321f5933810079f7c61d733a4a0f033d605
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05134701/Netherlands1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: OgO0TKC8jZbf8yJ+6tUrPTS7IcYiNMtLs3KmhfYPmcklMVOFVIN+qfqYtXsIjs3Q/VqL6unz5QM=
x-amz-request-id: F17X9Z9TB4M3DPG2
Date: Wed, 22 Feb 2023 13:09:06 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:41 GMT
ETag: "a19874c7d02744990237b827439132a4"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 13:47:01 GMT
x-amz-version-id: 28LeGCtB6pYn.FjZ8bQqfzeq4Hz2DMmS
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3841
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05135311/Norway1.png
200 OK 3.1 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05135311/Norway1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 9021ba1b169c443fcf1ef4205c66746b
57b448f98b746fdd70b85c2c3db3a692c59ed4e9
29be706a53e4348fc185d63ce98c4747e517c1371e9806be940e13637eeed375
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05135311/Norway1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: 0qA386pzaItYzZjWNk8XRK4AkrQhO2L7NnCH1WIvVomLonmWBnAifEEmlQe8PIIoZqSU+8sJgL0=
x-amz-request-id: F17KTSS2MZ3S53F1
Date: Wed, 22 Feb 2023 13:09:06 GMT
Last-Modified: Wed, 14 Jul 2021 12:09:56 GMT
ETag: "9021ba1b169c443fcf1ef4205c66746b"
x-amz-version-id: U31NsyBZvHkqDUS_Ugic5SNoLOgwf_dQ
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3056
zerossl.ocsp.sectigo.com/
200 OK 727 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 62b94c4c909fae40d2ac24eb89183aee
a7fd0d2a00a01b3702ad6be4bd434ae5aa4cd931
0c989a2b31ea27342cf87dcdd448d19d2f950407518f478f3fa1a6654c259ece
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 13:09:05 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 20 Feb 2023 00:02:11 GMT
Expires: Mon, 27 Feb 2023 00:02:10 GMT
Etag: "a7fd0d2a00a01b3702ad6be4bd434ae5aa4cd931"
Cache-Control: max-age=384184,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79d7f4437e390b69-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5a9e54f54243639a31020050bfc7fb55
c49766d67bea2ce07bd3c925d42897ab992f94e2
26b96bbdd02ca9498d5c7a4b970ebbec31039db95a2ce6e5a6ff665c73023a8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05111205/Denmark1.png
200 OK 3.9 kB URL HTTP/1.1 s3-eu-west-2.amazonaws.com/lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05111205/Denmark1.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 017dcaacabe7f7dfbf5b430b8188b614
f4cdef6d7cd166e354bcd343aac76dd867eac2eb
4b7007c107f881d48678205fd27f0fdd50d23088bdbf1c7b12af442630909a34
GET /lycamobileukwebsite/lycauk/dev/lycamobile-uk-cms/wp-content/uploads/2017/04/05111205/Denmark1.png HTTP/1.1
Host: s3-eu-west-2.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: EgzHTa/AtdI304SnwbgCxIwo1OfuQEgAjC0P0fIv/BYL9s6cIPc3lbZxGjFxBbnzAzlgqxRmBoQ=
x-amz-request-id: F17X4PGBD1F8GAG8
Date: Wed, 22 Feb 2023 13:09:06 GMT
Last-Modified: Mon, 19 Apr 2021 09:38:32 GMT
ETag: "017dcaacabe7f7dfbf5b430b8188b614"
Cache-Control: max-age=31536000
Expires: Wed, 05 Dec 2018 11:12:05 GMT
x-amz-version-id: uiFsOj3HohBE.Jebck2oQOY6RiDfxk3Q
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 3893
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 00fc3b5f1c0bf75bad8c142109720834
050f2d14da16248ead53d3996d88aacd18e5041a
b5f65aaa770693ab60c9c5342fa5aff03408055071e73a7c08c89fb5faf143c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 00fc3b5f1c0bf75bad8c142109720834
050f2d14da16248ead53d3996d88aacd18e5041a
b5f65aaa770693ab60c9c5342fa5aff03408055071e73a7c08c89fb5faf143c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/ddm/fls/i/src=12701373;type=invmedia;cat=allus0;ord=1;num=4045038260184;gtm=45He32f0;auiddc=472649691.1677071345;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c
302 Found 0 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=12701373;type=invmedia;cat=allus0;ord=1;num=4045038260184;gtm=45He32f0;auiddc=472649691.1677071345;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ddm/fls/i/src=12701373;type=invmedia;cat=allus0;ord=1;num=4045038260184;gtm=45He32f0;auiddc=472649691.1677071345;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 22 Feb 2023 13:09:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
location: https://12701373.fls.doubleclick.net/ddm/fls/r/src=12701373;type=invmedia;cat=allus0;ord=1;num=4045038260184;gtm=45He32f0;auiddc=472649691.1677071345;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
adservice.google.no/ddm/fls/i/src=11029147;type=invmedia;cat=nolyc0;ord=4174465868660;gtm=45He32f0;auiddc=472649691.1677071345;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c
200 OK 85 B URL HTTP/2 adservice.google.no/ddm/fls/i/src=11029147;type=invmedia;cat=nolyc0;ord=4174465868660;gtm=45He32f0;auiddc=472649691.1677071345;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 4a3b3637744caa4a0b08fabbd76cc830
755e5626762ecf38f55012da892a227bf50f15f1
6a12009f3d99f10dd5acb27389beefed79eddd7fa55ddcc591baf92861d51bfb
GET /ddm/fls/i/src=11029147;type=invmedia;cat=nolyc0;ord=4174465868660;gtm=45He32f0;auiddc=472649691.1677071345;~oref=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://adservice.google.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 22 Feb 2023 13:09:05 GMT
expires: Wed, 22 Feb 2023 13:09:05 GMT
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 85
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 00fc3b5f1c0bf75bad8c142109720834
050f2d14da16248ead53d3996d88aacd18e5041a
b5f65aaa770693ab60c9c5342fa5aff03408055071e73a7c08c89fb5faf143c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lycamobile.demdex.net/dest5.html?d_nsid=0
200 OK 2.8 kB URL HTTP/1.1 lycamobile.demdex.net/dest5.html?d_nsid=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (550)
Hash ccbdcb1e84c241950763ec4cd516cdfc
55dfa8d4b09c5c3a80fcd101152f6ebed3d27a2c
de9ccb9b168945a24f20edc28c39be4135b328129ba8ee378401a7aedc925d12
GET /dest5.html?d_nsid=0 HTTP/1.1
Host: lycamobile.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: text/html;charset=UTF-8
date: Wed, 22 Feb 2023 13:09:05 GMT
DCS: dcs-prod-irl1-1-v046-017db7cbf.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
last-modified: Sat, 11 Feb 2023 13:12:47 GMT
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
vary: accept-encoding
X-TID: vf0zFRzwSN0=
Content-Length: 2791
Connection: keep-alive
tracker.selectivv.com/view?clickid=63f613eef8d65f0001b92a0c&referrer=
204 No Content 0 B URL HTTP/1.1 tracker.selectivv.com/view?clickid=63f613eef8d65f0001b92a0c&referrer=
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /view?clickid=63f613eef8d65f0001b92a0c&referrer= HTTP/1.1
Host: tracker.selectivv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.2
Date: Wed, 22 Feb 2023 13:09:05 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
inv-dmp.admixer.net/dmpcnt.js?cntoid=857dd00f-c12c-43ff-be0e-596c692063d1
200 OK 1.2 kB URL HTTP/1.1 inv-dmp.admixer.net/dmpcnt.js?cntoid=857dd00f-c12c-43ff-be0e-596c692063d1
IP
ASN #20773 Host Europe GmbH
File type ASCII text, with CRLF line terminators
Hash d053803a8209adda269d24bb12ac80e1
d5d553af544c7acf6f8aa0988a24c6017049b1c2
5803e3ff7d5ba6c5676629a427426564c3cac21c0b17d5486d3a990c0d995b35
GET /dmpcnt.js?cntoid=857dd00f-c12c-43ff-be0e-596c692063d1 HTTP/1.1
Host: inv-dmp.admixer.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 22 Feb 2023 13:09:05 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store
Expires: Wed, 21 Oct 2015 07:28:00 GMT
Set-Cookie: am-uid=4273c88d398043818419c35bd2bb0fff; expires=Tue, 23 May 2023 13:09:05 GMT;domain=.admixer.net;path=/;secure;SameSite=None
P3P: CP="NID DSP ALL COR"
Keep-Alive: timeout=25
tracker.selectivv.com/view?clickid=63f613eef8d65f0001b92a0c
204 No Content 0 B URL HTTP/1.1 tracker.selectivv.com/view?clickid=63f613eef8d65f0001b92a0c
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /view?clickid=63f613eef8d65f0001b92a0c HTTP/1.1
Host: tracker.selectivv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.2
Date: Wed, 22 Feb 2023 13:09:05 GMT
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/06/mobile_icons_svg_bundle.svg
200 OK 422 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/06/mobile_icons_svg_bundle.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text
Hash efc5d499203342c7943e44c68c22f670
6cd73fa1bfb854fa47ca2323986aca519e566936
adbb8b4b73d3eec20f434af5a3207f4076f2d47cc4e8f94b916a6b9a5a827454
GET /wp-content/uploads/2017/06/mobile_icons_svg_bundle.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Content-Length: 422
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:08 GMT
Last-Modified: Tue, 15 Feb 2022 04:56:40 GMT
ETag: "efc5d499203342c7943e44c68c22f670"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: vc8m52Eq_mdrbxhZ1fSo0paqGCX370--2byBgBU9xf2-WKBCzTqt7A==
Age: 45598
d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/06/phone-call.svg
200 OK 604 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/06/phone-call.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text, with very long lines (469)
Hash 2a3c2d102f0a6647ff4c989f9e5183dd
bfaf1194f81cb8b5300a3789624534c6786c8cb1
0c7b8c0063cebc49797c54a410e7e9b783047885c1a925c9bd4f1948353733c7
GET /wp-content/uploads/2017/06/phone-call.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Content-Length: 604
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:08 GMT
Last-Modified: Tue, 15 Feb 2022 04:56:36 GMT
ETag: "2a3c2d102f0a6647ff4c989f9e5183dd"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: I6FHQlpkXgemS4F81xf7DvTNaGxyRm70JnnTeefIRw3t_pKvjwP2UQ==
Age: 45598
d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/04/Norway.png
200 OK 3.1 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/04/Norway.png
IP
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash 9021ba1b169c443fcf1ef4205c66746b
57b448f98b746fdd70b85c2c3db3a692c59ed4e9
29be706a53e4348fc185d63ce98c4747e517c1371e9806be940e13637eeed375
GET /wp-content/uploads/2017/04/Norway.png HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 3056
Connection: keep-alive
Last-Modified: Tue, 27 Aug 2019 08:28:07 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 22 Feb 2023 00:28:35 GMT
Cache-Control: 2592000
ETag: "9021ba1b169c443fcf1ef4205c66746b"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ICuxrpE9RTDK-DG6w3MQI9TIBRx-VzNTq-hiMtoC4HG4yHpIKxMTtA==
Age: 45631
d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2018/06/buy_sim_new-br-1.png
200 OK 15 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2018/06/buy_sim_new-br-1.png
IP
File type PNG image data, 522 x 235, 8-bit/color RGBA, non-interlaced\012- data
Hash 445a17c3cfa8b089268d00afb9cc2a12
9ab22aafb3bf1f21831e8fff3770306a4da50fcc
955ea640ad8413dcbd59590421eb5462a49c8224cdfa4638db9bcef8ff8d2d9b
GET /wp-content/uploads/2018/06/buy_sim_new-br-1.png HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 15283
Connection: keep-alive
Last-Modified: Mon, 18 Oct 2021 05:20:16 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 22 Feb 2023 00:31:16 GMT
ETag: "445a17c3cfa8b089268d00afb9cc2a12"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: yBTdzfmzQ2aTPSACQO4_mPmSos_Mf4P1br62CM7w1_Z6826ZsWh-sA==
Age: 45470
d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/06/national-text.svg
200 OK 379 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2017/06/national-text.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (379), with no line terminators
Hash 873789b36bcca252488070dc6727c3b3
03147946a7c606a77334fc61848099d96a240a4b
6a8c3a01af957fe571fd86413bf84ac367df9b687f811efa6dc0814600d331cb
GET /wp-content/uploads/2017/06/national-text.svg HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/svg+xml
Content-Length: 379
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:08 GMT
Last-Modified: Tue, 15 Feb 2022 04:56:38 GMT
ETag: "873789b36bcca252488070dc6727c3b3"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: xd5fuswYNodTOWNOJI377gqXYJohsVOqstL_IgtmwS5Q4hDkeyGImA==
Age: 45598
d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2018/06/Refer_a_friend_br.png
200 OK 63 kB URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/uploads/2018/06/Refer_a_friend_br.png
IP
File type PNG image data, 522 x 235, 8-bit/color RGBA, non-interlaced\012- data
Hash 4fe087bad3bb3390beeea312c1a14de8
cf28dafa12cf6e1892ad7c76f839eccb35a0f840
f6dacf9f4c9eeba6a1743731c3228cca08c0dfd61db94db66cd3c26a3958ccad
GET /wp-content/uploads/2018/06/Refer_a_friend_br.png HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 62719
Connection: keep-alive
Last-Modified: Mon, 18 Oct 2021 05:20:24 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 22 Feb 2023 00:31:16 GMT
ETag: "4fe087bad3bb3390beeea312c1a14de8"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: X_iZYplBa75Wl712lS-zyoubhqcga0qPdLbXb3LqhWB8v7P81MdQkg==
Age: 45470
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Wed, 22 Feb 2023 11:45:20 GMT
expires: Wed, 22 Feb 2023 13:45:20 GMT
cache-control: public, max-age=7200
age: 5025
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 12 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type Unicode text, UTF-8 text, with very long lines (39395), with no line terminators
Hash 4f378a725368a42971cd69e29f75db89
2a1cdf193b346d9281c6e04a9b3775e7fc1ae11e
6a2a9d238501343cb3f25e0f54f4ecc4ec2c4e0fa6b228cc72dc3fff90502078
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 11552
content-type: application/javascript
content-encoding: gzip
last-modified: Mon, 23 Jan 2023 19:59:24 GMT
accept-ranges: bytes
etag: "076bc30652fd91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B248969D9FD14E6BA8E8260426F5A854 Ref B: OSL30EDGE0309 Ref C: 2023-02-22T13:09:05Z
date: Wed, 22 Feb 2023 13:09:04 GMT
X-Firefox-Spdy: h2
static.ads-twitter.com/uwt.js
200 OK 15 kB URL HTTP/2 static.ads-twitter.com/uwt.js
IP
File type ASCII text, with very long lines (57596), with no line terminators
Hash 573e6a7f86f6f3063763360ef0672c01
b12eab3b4ac8872d49ac6e15f9cd17741765c0cf
02445eb022a04139531f0ce8d8980c31083a1c670936f1477f5cfc4d252133f7
GET /uwt.js HTTP/1.1
Host: static.ads-twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:55:37 GMT
cache-control: no-cache
content-type: application/javascript; charset=utf-8
content-encoding: gzip
etag: "32ad004436155ec972bc50e6238b5b67+gzip+gzip"
accept-ranges: bytes
date: Wed, 22 Feb 2023 13:09:05 GMT
x-served-by: cache-iad-kjyo7100147-IAD, cache-bma1662-BMA
x-cache: HIT, HIT
vary: Accept-Encoding,Host
p3p: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
x-tw-cdn: FT
content-length: 15375
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cab5e000357eb640109d7b9a6531daaf
e9190667dd8bd5a9cb2f682500d4e2b1dad70f37
37668e3983dea0dcf89f8a86666520d1e21bced386d173101f089ab76a9b9b6d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 472 B IP
Hash d7f7401f12865c537af5d685e470cec8
419a4475a4ee3ce0d7202761e5c2adf02fedd6ce
84f40c098e1cccd8379c4926d5d1d93f4e91c7b62c0c3c287660de4f3f63a595
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 13:09:05 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 20 Feb 2023 11:44:17 GMT
Expires: Mon, 27 Feb 2023 11:44:16 GMT
Etag: "419a4475a4ee3ce0d7202761e5c2adf02fedd6ce"
Cache-Control: max-age=426310,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79d7f446e9abb4fd-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash e61ae0c1393c132fa9ba2d870932d5bb
b6e48d56417c1e1fb8b0f35de24498048cd3ad27
810db95221e19a26f0d919852dae36c852780f183d06d38479f827553cffd8b2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4969
Cache-Control: max-age=91971
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:05 GMT
Etag: "63f4c4cb-1d7"
Expires: Thu, 23 Feb 2023 14:41:56 GMT
Last-Modified: Tue, 21 Feb 2023 13:19:07 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 63f6de971bf1638bfdc7655dc0e31a7c
d03309a1b2e0951e33abad27b4b50e94fe9c9cda
407e1853ff6dba158835f9e798a9211ffe9420bac1d1777e5cc85329ea3df9e3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/viewthroughconversion/11068065957/?random=1677071345473&cv=11&fst=1677071345473&bg=ffffff&guid=ON&async=1>m=45be32f0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c&tiba=Hello%20Norway%20L%20-%20Lycamobile&did=dMWZhNz&gdid=dMWZhNz&us_privacy=1---&auid=472649691.1677071345&data=event%3Dgtag.config&rfmt=3&fmt=4
200 OK 1.0 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/viewthroughconversion/11068065957/?random=1677071345473&cv=11&fst=1677071345473&bg=ffffff&guid=ON&async=1>m=45be32f0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c&tiba=Hello%20Norway%20L%20-%20Lycamobile&did=dMWZhNz&gdid=dMWZhNz&us_privacy=1---&auid=472649691.1677071345&data=event%3Dgtag.config&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2369), with no line terminators
Hash 0735c9957085214db534575c3fd81c72
331070fe6227e63b6e576b6827cdcfa357c0029d
089652f09cf9e54553ef798e00e28685a8244ea5a2804e152794830a5cb4f427
GET /pagead/viewthroughconversion/11068065957/?random=1677071345473&cv=11&fst=1677071345473&bg=ffffff&guid=ON&async=1>m=45be32f0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c&tiba=Hello%20Norway%20L%20-%20Lycamobile&did=dMWZhNz&gdid=dMWZhNz&us_privacy=1---&auid=472649691.1677071345&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 22 Feb 2023 13:09:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1038
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Wed, 22-Feb-2023 13:24:05 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e92b7bb852b13b70a76783a804899232
7d49184483e5e2a8da350f23995917edfc0b747e
8bc7dc3017eec85ade72f43708e99aefe122941f3f81753186898fa6757d6d40
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8BC7DC3017EEC85ADE72F43708E99AEFE122941F3F81753186898FA6757D6D40"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7487
Expires: Wed, 22 Feb 2023 15:13:52 GMT
Date: Wed, 22 Feb 2023 13:09:05 GMT
Connection: keep-alive
www.googleadservices.com/pagead/conversion.js
200 OK 17 kB URL HTTP/2 www.googleadservices.com/pagead/conversion.js
IP
File type ASCII text, with very long lines (2772)
Hash 671f762c05b34ce8c33acb0f5cc14533
c3ddbfedc40bfb4b1cb4957aee8c287b4f8a2ccb
b21debe44bbe7a05d91851626ce5db58232d817aa2974f826d387da6e4b75618
GET /pagead/conversion.js HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://12701373.fls.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Wed, 22 Feb 2023 13:09:05 GMT
expires: Wed, 22 Feb 2023 13:09:05 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 6388606791587927312
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 16813
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
my.rtmark.net/p.js?f=sync&lr=1&partner=175111902db4aef9db8f766340f44629168c2434d0e24fd07b44d49b2cae2798
200 OK 697 B URL HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=175111902db4aef9db8f766340f44629168c2434d0e24fd07b44d49b2cae2798
IP
Hash a7fc8ba827a418e57982e8a43b7165ba
97008cdaafe4e6aa50f54d3c587bffa8eece3f44
d74d9e79ca40714e0c59bde09d8faaa818d0b74e12265c2381af2d01268a6ece
GET /p.js?f=sync&lr=1&partner=175111902db4aef9db8f766340f44629168c2434d0e24fd07b44d49b2cae2798 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 22 Feb 2023 13:09:05 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cab5e000357eb640109d7b9a6531daaf
e9190667dd8bd5a9cb2f682500d4e2b1dad70f37
37668e3983dea0dcf89f8a86666520d1e21bced386d173101f089ab76a9b9b6d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash ac5254aa70e2750acc9a1701549b0297
fa056903b784989b4926091a470351e92168ad93
461a9130f5416d1eb99f86af93fa542b60d099943026ff18acd5597f9449615c
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=133178
Date: Wed, 22 Feb 2023 13:09:05 GMT
Etag: "63f56660-1d7"
Expires: Fri, 24 Feb 2023 02:08:43 GMT
Last-Modified: Wed, 22 Feb 2023 00:48:32 GMT
Server: ECS (nyb/1D1E)
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: G7j9m0RtbU1mzLXpNHJzP0RIS7OXsAz4Va3vmx0xQ91Jwo_p0kVkNA==
Age: 4811
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 52a08d5240e455734bd1b1b2b9a7f151
25024748c5b3a84fc509f1fd939de98767898ce1
ca673bcf13c36a73504dbc4ed586b54b6b11e926ba1cb4ce4d55d72f18d0970c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/fbevents.js
200 OK 28 kB URL HTTP/2 connect.facebook.net/en_US/fbevents.js
IP
File type ASCII text, with very long lines (64348)
Hash be5a1814429d0a129322abda3791987f
9e0eeee65e17a9c6df149ed1f01d3d7194833fd8
75afa897dd6f4b97b0697589569c7c4f87e32b79addf981febc78a4ff741210e
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: ZefwWBxW1DYDvpKGFfCZVORAxJxNVVKS9Xv731crRGcUDJ0VTs4LsxM+EPjuhh41mNIjiqgB4XjWASO7n38xQQ==
priority: u=3,i
content-length: 27843
x-fb-trip-id: 1679558926
date: Wed, 22 Feb 2023 13:09:05 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash e61ae0c1393c132fa9ba2d870932d5bb
b6e48d56417c1e1fb8b0f35de24498048cd3ad27
810db95221e19a26f0d919852dae36c852780f183d06d38479f827553cffd8b2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4969
Cache-Control: max-age=91971
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:05 GMT
Etag: "63f4c4cb-1d7"
Expires: Thu, 23 Feb 2023 14:41:56 GMT
Last-Modified: Tue, 21 Feb 2023 13:19:07 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 313 B IP
Hash 9b7a25cfd59ac6f5cb590286bcc6f0ff
9d29c359707e2ca77a6ac0a478b2076fc4c6eca7
ed56f0f31961ccf0b42e8d696ef22c346e457510519596c50e6b143f9238544e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2792
Cache-Control: max-age=171126
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:05 GMT
Etag: "63f6027f-139"
Expires: Fri, 24 Feb 2023 12:41:11 GMT
Last-Modified: Wed, 22 Feb 2023 11:54:39 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 313
www.googleadservices.com/pagead/conversion/11048203556/?random=1677071346034&cv=9&fst=1677071346034&num=1&npa=1&label=pUGwCOv1lIcYEKTqmJQp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465925&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=9&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F12701373.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D12701373%3Btype%3Dinvmedia%3Bcat%3Dallus0%3Bord%3D1%3Bnum%3D4045038260184%3Bgtm%3D45He32f0%3Bauiddc%3D472649691.1677071345%3B~oref%3Dhttps%253A%252F%252Fwww.lyca-mobile.no%252Fnb%252Fbundle%252Flyca-smart-l%252F%253Futm_source%253DSelectivv%2526utm_medium%253Dbanner%2526utm_campaign%253DCNOR4001CAO0223HNL1PRGDUT%2526utm_term%253DP5%2526user_id%253D63f613eef8d65f0001b92a0c%2526cmpid%253D637fb0f9010e700001e597f3%2526rtkcid%253D63f613eef8d65f0001b92a0c&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&rfmt=3&fmt=4
200 OK 1.3 kB URL HTTP/2 www.googleadservices.com/pagead/conversion/11048203556/?random=1677071346034&cv=9&fst=1677071346034&num=1&npa=1&label=pUGwCOv1lIcYEKTqmJQp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465925&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=9&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F12701373.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D12701373%3Btype%3Dinvmedia%3Bcat%3Dallus0%3Bord%3D1%3Bnum%3D4045038260184%3Bgtm%3D45He32f0%3Bauiddc%3D472649691.1677071345%3B~oref%3Dhttps%253A%252F%252Fwww.lyca-mobile.no%252Fnb%252Fbundle%252Flyca-smart-l%252F%253Futm_source%253DSelectivv%2526utm_medium%253Dbanner%2526utm_campaign%253DCNOR4001CAO0223HNL1PRGDUT%2526utm_term%253DP5%2526user_id%253D63f613eef8d65f0001b92a0c%2526cmpid%253D637fb0f9010e700001e597f3%2526rtkcid%253D63f613eef8d65f0001b92a0c&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&rfmt=3&fmt=4
IP
File type ASCII text, with very long lines (2263), with no line terminators
Hash 12c2c0da4a614748995dc88f227e5a25
2adc7bf271519a356f79109df29c77470e48982a
4fe8a6e66be27a8c33e13d326cf912cbaada45ddf638208c6c78f8b6fab06e1a
GET /pagead/conversion/11048203556/?random=1677071346034&cv=9&fst=1677071346034&num=1&npa=1&label=pUGwCOv1lIcYEKTqmJQp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465925&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=9&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F12701373.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D12701373%3Btype%3Dinvmedia%3Bcat%3Dallus0%3Bord%3D1%3Bnum%3D4045038260184%3Bgtm%3D45He32f0%3Bauiddc%3D472649691.1677071345%3B~oref%3Dhttps%253A%252F%252Fwww.lyca-mobile.no%252Fnb%252Fbundle%252Flyca-smart-l%252F%253Futm_source%253DSelectivv%2526utm_medium%253Dbanner%2526utm_campaign%253DCNOR4001CAO0223HNL1PRGDUT%2526utm_term%253DP5%2526user_id%253D63f613eef8d65f0001b92a0c%2526cmpid%253D637fb0f9010e700001e597f3%2526rtkcid%253D63f613eef8d65f0001b92a0c&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&rfmt=3&fmt=4 HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://12701373.fls.doubleclick.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 22 Feb 2023 13:09:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 1299
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cm.everesttech.net/cm/dd?d_uuid=30769884933498743286189286825901187890
302 0 B URL HTTP/1.1 cm.everesttech.net/cm/dd?d_uuid=30769884933498743286189286825901187890
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm/dd?d_uuid=30769884933498743286189286825901187890 HTTP/1.1
Host: cm.everesttech.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302
Date: Wed, 22 Feb 2023 13:09:05 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: everest_g_v2=g_surferid~Y-YT8QAAAGrKYQN6; Domain=.everesttech.net; Expires=Thu, 22-Feb-2024 13:09:05 GMT; Path=/
everest_session_v2=Y-YT8QAAAGrKYgN6; Domain=.everesttech.net; Path=/
P3P: CP="NOI NID DEVa PSAa PSDa OUR IND PUR COM NAV INT DEM"
Cache-Control: no-cache
Location: https://dpm.demdex.net/ibs:dpid=411&dpuuid=Y-YT8QAAAGrKYQN6
Server: AMO-cookiemap/1.1
ocsp.sectigo.com/
200 OK 472 B IP
Hash d7f7401f12865c537af5d685e470cec8
419a4475a4ee3ce0d7202761e5c2adf02fedd6ce
84f40c098e1cccd8379c4926d5d1d93f4e91c7b62c0c3c287660de4f3f63a595
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 22 Feb 2023 13:09:05 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 20 Feb 2023 11:44:17 GMT
Expires: Mon, 27 Feb 2023 11:44:16 GMT
Etag: "419a4475a4ee3ce0d7202761e5c2adf02fedd6ce"
Cache-Control: max-age=426310,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79d7f447096a0afa-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 440beb93bc2481c500bed2c2719a96ab
8231c07a8cf345bf3b1e5ca5d7b4e8af60d72ae5
14182dbb3daa77650d97e07e0c567f73648720a4b06633200dd1846da8c5b0bb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/1p-conversion/11048203556/?random=2113243315&cv=9&fst=1677071346034&num=1&npa=1&label=pUGwCOv1lIcYEKTqmJQp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465925&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=9&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F12701373.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D12701373%3Btype%3Dinvmedia%3Bcat%3Dallus0%3Bord%3D1%3Bnum%3D4045038260184%3Bgtm%3D45He32f0%3Bauiddc%3D472649691.1677071345%3B~oref%3Dhttps%253A%252F%252Fwww.lyca-mobile.no%252Fnb%252Fbundle%252Flyca-smart-l%252F%253Futm_source%253DSelectivv%2526utm_medium%253Dbanner%2526utm_campaign%253DCNOR4001CAO0223HNL1PRGDUT%2526utm_term%253DP5%2526user_id%253D63f613eef8d65f0001b92a0c%2526cmpid%253D637fb0f9010e700001e597f3%2526rtkcid%253D63f613eef8d65f0001b92a0c&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=8RP2Y5WcN4KbiQb4zaO4AQ&random=3030397152&resp=GooglemKTybQhCsO
302 Found 42 B URL HTTP/2 www.google.com/pagead/1p-conversion/11048203556/?random=2113243315&cv=9&fst=1677071346034&num=1&npa=1&label=pUGwCOv1lIcYEKTqmJQp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465925&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=9&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F12701373.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D12701373%3Btype%3Dinvmedia%3Bcat%3Dallus0%3Bord%3D1%3Bnum%3D4045038260184%3Bgtm%3D45He32f0%3Bauiddc%3D472649691.1677071345%3B~oref%3Dhttps%253A%252F%252Fwww.lyca-mobile.no%252Fnb%252Fbundle%252Flyca-smart-l%252F%253Futm_source%253DSelectivv%2526utm_medium%253Dbanner%2526utm_campaign%253DCNOR4001CAO0223HNL1PRGDUT%2526utm_term%253DP5%2526user_id%253D63f613eef8d65f0001b92a0c%2526cmpid%253D637fb0f9010e700001e597f3%2526rtkcid%253D63f613eef8d65f0001b92a0c&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=8RP2Y5WcN4KbiQb4zaO4AQ&random=3030397152&resp=GooglemKTybQhCsO
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-conversion/11048203556/?random=2113243315&cv=9&fst=1677071346034&num=1&npa=1&label=pUGwCOv1lIcYEKTqmJQp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465925&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=9&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F12701373.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D12701373%3Btype%3Dinvmedia%3Bcat%3Dallus0%3Bord%3D1%3Bnum%3D4045038260184%3Bgtm%3D45He32f0%3Bauiddc%3D472649691.1677071345%3B~oref%3Dhttps%253A%252F%252Fwww.lyca-mobile.no%252Fnb%252Fbundle%252Flyca-smart-l%252F%253Futm_source%253DSelectivv%2526utm_medium%253Dbanner%2526utm_campaign%253DCNOR4001CAO0223HNL1PRGDUT%2526utm_term%253DP5%2526user_id%253D63f613eef8d65f0001b92a0c%2526cmpid%253D637fb0f9010e700001e597f3%2526rtkcid%253D63f613eef8d65f0001b92a0c&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=8RP2Y5WcN4KbiQb4zaO4AQ&random=3030397152&resp=GooglemKTybQhCsO HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://12701373.fls.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 22 Feb 2023 13:09:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/11048203556/?random=2113243315&cv=9&fst=1677071346034&num=1&npa=1&label=pUGwCOv1lIcYEKTqmJQp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465925&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=9&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F12701373.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D12701373%3Btype%3Dinvmedia%3Bcat%3Dallus0%3Bord%3D1%3Bnum%3D4045038260184%3Bgtm%3D45He32f0%3Bauiddc%3D472649691.1677071345%3B~oref%3Dhttps%253A%252F%252Fwww.lyca-mobile.no%252Fnb%252Fbundle%252Flyca-smart-l%252F%253Futm_source%253DSelectivv%2526utm_medium%253Dbanner%2526utm_campaign%253DCNOR4001CAO0223HNL1PRGDUT%2526utm_term%253DP5%2526user_id%253D63f613eef8d65f0001b92a0c%2526cmpid%253D637fb0f9010e700001e597f3%2526rtkcid%253D63f613eef8d65f0001b92a0c&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=8RP2Y5WcN4KbiQb4zaO4AQ&random=3030397152&resp=GooglemKTybQhCsO&ipr=y&prhg=0
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/11068065957/?random=1677071345473&cv=11&fst=1677070800000&bg=ffffff&guid=ON&async=1>m=45be32f0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c&tiba=Hello%20Norway%20L%20-%20Lycamobile&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2696339220&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/11068065957/?random=1677071345473&cv=11&fst=1677070800000&bg=ffffff&guid=ON&async=1>m=45be32f0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c&tiba=Hello%20Norway%20L%20-%20Lycamobile&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2696339220&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/11068065957/?random=1677071345473&cv=11&fst=1677070800000&bg=ffffff&guid=ON&async=1>m=45be32f0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c&tiba=Hello%20Norway%20L%20-%20Lycamobile&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2696339220&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 22 Feb 2023 13:09:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dpm.demdex.net/ibs:dpid=411&dpuuid=Y-YT8QAAAGrKYQN6
302 Found 0 B URL HTTP/1.1 dpm.demdex.net/ibs:dpid=411&dpuuid=Y-YT8QAAAGrKYQN6
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ibs:dpid=411&dpuuid=Y-YT8QAAAGrKYQN6 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.lyca-mobile.no/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-1-v046-01f5e9cb4.edge-irl1.demdex.com 1 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=411&dpuuid=Y-YT8QAAAGrKYQN6
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=91348435494855842523869809339586561859; Max-Age=15552000; Expires=Mon, 21 Aug 2023 13:09:06 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-TID: ygy7o429Q1g=
Content-Length: 0
Connection: keep-alive
bat.bing.com/action/0?ti=15267795&tm=gtm002&Ver=2&mid=e934c642-c184-4dac-9e27-ece6f19de604&sid=15e49f60b2b211ed9274d3252b774305&vid=15e4a8b0b2b211edab865d2157e5d81c&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Hello%20Norway%20L%20-%20Lycamobile&p=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c&r=<=3279&evt=pageLoad&sv=1&rn=699460
204 No Content 0 B URL HTTP/2 bat.bing.com/action/0?ti=15267795&tm=gtm002&Ver=2&mid=e934c642-c184-4dac-9e27-ece6f19de604&sid=15e49f60b2b211ed9274d3252b774305&vid=15e4a8b0b2b211edab865d2157e5d81c&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Hello%20Norway%20L%20-%20Lycamobile&p=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c&r=<=3279&evt=pageLoad&sv=1&rn=699460
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=15267795&tm=gtm002&Ver=2&mid=e934c642-c184-4dac-9e27-ece6f19de604&sid=15e49f60b2b211ed9274d3252b774305&vid=15e4a8b0b2b211edab865d2157e5d81c&vids=1&msclkid=N&pi=0&lg=en-US&sw=1280&sh=1024&sc=24&tl=Hello%20Norway%20L%20-%20Lycamobile&p=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c&r=<=3279&evt=pageLoad&sv=1&rn=699460 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=191D162A0AC26FDE2A5904EA0B956EEF; domain=.bing.com; expires=Mon, 18-Mar-2024 13:09:06 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 468B8B67634644A18A24B225C56CAAC1 Ref B: OSL30EDGE0309 Ref C: 2023-02-22T13:09:06Z
date: Wed, 22 Feb 2023 13:09:05 GMT
X-Firefox-Spdy: h2
t.co/i/adsct?bci=3&eci=2&event_id=8d31825a-67e6-4bee-8277-8e71328af23e&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ed6cfd69-8cd4-4e67-8ad4-b445592518f5&tw_document_href=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o13z4&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 t.co/i/adsct?bci=3&eci=2&event_id=8d31825a-67e6-4bee-8277-8e71328af23e&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ed6cfd69-8cd4-4e67-8ad4-b445592518f5&tw_document_href=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o13z4&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=8d31825a-67e6-4bee-8277-8e71328af23e&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ed6cfd69-8cd4-4e67-8ad4-b445592518f5&tw_document_href=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o13z4&type=javascript&version=2.3.29 HTTP/1.1
Host: t.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Feb 2023 13:09:05 GMT
perf: 7626143928
server: tsa_o
set-cookie: muc_ads=f624250a-4f9f-426f-b5ea-ce58615c9aa4; Max-Age=63072000; Expires=Fri, 21 Feb 2025 13:09:06 GMT; Path=/; Domain=t.co; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: 99f21c44c456c630
strict-transport-security: max-age=0
x-response-time: 185
x-connection-hash: 665706272c6b1c8177fc84a1a0726a4d394b306fe039e49c7f8e46bb11acafc6
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/11068065957/?random=1677071345473&cv=11&fst=1677070800000&bg=ffffff&guid=ON&async=1>m=45be32f0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c&tiba=Hello%20Norway%20L%20-%20Lycamobile&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2696339220&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/11068065957/?random=1677071345473&cv=11&fst=1677070800000&bg=ffffff&guid=ON&async=1>m=45be32f0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c&tiba=Hello%20Norway%20L%20-%20Lycamobile&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2696339220&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/11068065957/?random=1677071345473&cv=11&fst=1677070800000&bg=ffffff&guid=ON&async=1>m=45be32f0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c&tiba=Hello%20Norway%20L%20-%20Lycamobile&data=event%3Dgtag.config&fmt=3&is_vtc=1&random=2696339220&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 22 Feb 2023 13:09:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/11048203556/?random=2113243315&cv=9&fst=1677071346034&num=1&npa=1&label=pUGwCOv1lIcYEKTqmJQp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465925&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=9&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F12701373.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D12701373%3Btype%3Dinvmedia%3Bcat%3Dallus0%3Bord%3D1%3Bnum%3D4045038260184%3Bgtm%3D45He32f0%3Bauiddc%3D472649691.1677071345%3B~oref%3Dhttps%253A%252F%252Fwww.lyca-mobile.no%252Fnb%252Fbundle%252Flyca-smart-l%252F%253Futm_source%253DSelectivv%2526utm_medium%253Dbanner%2526utm_campaign%253DCNOR4001CAO0223HNL1PRGDUT%2526utm_term%253DP5%2526user_id%253D63f613eef8d65f0001b92a0c%2526cmpid%253D637fb0f9010e700001e597f3%2526rtkcid%253D63f613eef8d65f0001b92a0c&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=8RP2Y5WcN4KbiQb4zaO4AQ&random=3030397152&resp=GooglemKTybQhCsO&ipr=y&prhg=0
200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-conversion/11048203556/?random=2113243315&cv=9&fst=1677071346034&num=1&npa=1&label=pUGwCOv1lIcYEKTqmJQp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465925&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=9&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F12701373.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D12701373%3Btype%3Dinvmedia%3Bcat%3Dallus0%3Bord%3D1%3Bnum%3D4045038260184%3Bgtm%3D45He32f0%3Bauiddc%3D472649691.1677071345%3B~oref%3Dhttps%253A%252F%252Fwww.lyca-mobile.no%252Fnb%252Fbundle%252Flyca-smart-l%252F%253Futm_source%253DSelectivv%2526utm_medium%253Dbanner%2526utm_campaign%253DCNOR4001CAO0223HNL1PRGDUT%2526utm_term%253DP5%2526user_id%253D63f613eef8d65f0001b92a0c%2526cmpid%253D637fb0f9010e700001e597f3%2526rtkcid%253D63f613eef8d65f0001b92a0c&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=8RP2Y5WcN4KbiQb4zaO4AQ&random=3030397152&resp=GooglemKTybQhCsO&ipr=y&prhg=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-conversion/11048203556/?random=2113243315&cv=9&fst=1677071346034&num=1&npa=1&label=pUGwCOv1lIcYEKTqmJQp&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465925&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=9&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=2&url=https%3A%2F%2F12701373.fls.doubleclick.net%2Fddm%2Ffls%2Fr%2Fsrc%3D12701373%3Btype%3Dinvmedia%3Bcat%3Dallus0%3Bord%3D1%3Bnum%3D4045038260184%3Bgtm%3D45He32f0%3Bauiddc%3D472649691.1677071345%3B~oref%3Dhttps%253A%252F%252Fwww.lyca-mobile.no%252Fnb%252Fbundle%252Flyca-smart-l%252F%253Futm_source%253DSelectivv%2526utm_medium%253Dbanner%2526utm_campaign%253DCNOR4001CAO0223HNL1PRGDUT%2526utm_term%253DP5%2526user_id%253D63f613eef8d65f0001b92a0c%2526cmpid%253D637fb0f9010e700001e597f3%2526rtkcid%253D63f613eef8d65f0001b92a0c&ref=https%3A%2F%2Fadservice.google.com%2F&hn=www.googleadservices.com&fmt=3&ctc_id=CAIVAgAAAB0CAAAA&ct_cookie_present=false&sscte=1&crd=&is_vtc=1&ocp_id=8RP2Y5WcN4KbiQb4zaO4AQ&random=3030397152&resp=GooglemKTybQhCsO&ipr=y&prhg=0 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://12701373.fls.doubleclick.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 22 Feb 2023 13:09:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 899126c0f68e382b6681c684f5267b5b
24b9873b8ca03d84f16a84d9dd326b5cffb2c2c8
e5aea6b0cd96ea3442990bcd35aa961dd6afd4c43bf7484cb073fa1c6280aad2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5918
Cache-Control: max-age=87879
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:06 GMT
Etag: "63f4b11b-139"
Expires: Thu, 23 Feb 2023 13:33:45 GMT
Last-Modified: Tue, 21 Feb 2023 11:55:07 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 313
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6671ce3ac5f7d6c10a7b2888d21c80a3
28df37c42d5683df1bbe0c97c765d79a0522c4c9
e9025f881d175f1bf218970c07d0c599d96ee01e0757410e3889b1d543d7fd7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-22755827-1&cid=315006930.1677071346&jid=726789069&gjid=1321776020&_gid=1512210128.1677071346&_u=YEBAAEAAAAAAACABI~&z=2071412359
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-22755827-1&cid=315006930.1677071346&jid=726789069&gjid=1321776020&_gid=1512210128.1677071346&_u=YEBAAEAAAAAAACABI~&z=2071412359
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-22755827-1&cid=315006930.1677071346&jid=726789069&gjid=1321776020&_gid=1512210128.1677071346&_u=YEBAAEAAAAAAACABI~&z=2071412359 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.lyca-mobile.no
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.lyca-mobile.no
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 22 Feb 2023 13:09:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6671ce3ac5f7d6c10a7b2888d21c80a3
28df37c42d5683df1bbe0c97c765d79a0522c4c9
e9025f881d175f1bf218970c07d0c599d96ee01e0757410e3889b1d543d7fd7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/tr/?id=538386406931299&ev=PageView&dl=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c&rl=&if=false&ts=1677071346441&sw=1280&sh=1024&v=2.9.96&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1677071346440.1689722139&it=1677071346098&coo=false&rqm=GET
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=538386406931299&ev=PageView&dl=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c&rl=&if=false&ts=1677071346441&sw=1280&sh=1024&v=2.9.96&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1677071346440.1689722139&it=1677071346098&coo=false&rqm=GET
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=538386406931299&ev=PageView&dl=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c&rl=&if=false&ts=1677071346441&sw=1280&sh=1024&v=2.9.96&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1677071346440.1689722139&it=1677071346098&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 22 Feb 2023 13:09:06 GMT
X-Firefox-Spdy: h2
analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=8d31825a-67e6-4bee-8277-8e71328af23e&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ed6cfd69-8cd4-4e67-8ad4-b445592518f5&tw_document_href=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o13z4&type=javascript&version=2.3.29
200 OK 43 B URL HTTP/2 analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=8d31825a-67e6-4bee-8277-8e71328af23e&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ed6cfd69-8cd4-4e67-8ad4-b445592518f5&tw_document_href=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o13z4&type=javascript&version=2.3.29
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/adsct?bci=3&eci=2&event_id=8d31825a-67e6-4bee-8277-8e71328af23e&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ed6cfd69-8cd4-4e67-8ad4-b445592518f5&tw_document_href=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=o13z4&type=javascript&version=2.3.29 HTTP/1.1
Host: analytics.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Feb 2023 13:09:05 GMT
perf: 7626143928
server: tsa_o
set-cookie: personalization_id="v1_L9VLjQRwsxzlhk6RnGbgSQ=="; Max-Age=63072000; Expires=Fri, 21 Feb 2025 13:09:06 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None
content-type: image/gif;charset=utf-8
cache-control: no-cache, no-store, max-age=0
content-length: 43
x-transaction-id: d2a787452d8d95ac
strict-transport-security: max-age=631138519
x-response-time: 174
x-connection-hash: b5629c95e04581f8c8c085d3b029405b7c0fb6304635f1232ab8aed9b009138b
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=sync&partner=175111902db4aef9db8f766340f44629168c2434d0e24fd07b44d49b2cae2798&ttl=&rurl=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c
200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=sync&partner=175111902db4aef9db8f766340f44629168c2434d0e24fd07b44d49b2cae2798&ttl=&rurl=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=175111902db4aef9db8f766340f44629168c2434d0e24fd07b44d49b2cae2798&ttl=&rurl=https%3A%2F%2Fwww.lyca-mobile.no%2Fnb%2Fbundle%2Flyca-smart-l%2F%3Futm_source%3DSelectivv%26utm_medium%3Dbanner%26utm_campaign%3DCNOR4001CAO0223HNL1PRGDUT%26utm_term%3DP5%26user_id%3D63f613eef8d65f0001b92a0c%26cmpid%3D637fb0f9010e700001e597f3%26rtkcid%3D63f613eef8d65f0001b92a0c HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Feb 2023 13:09:06 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=387889da43834a18904c880bf2355291; expires=Thu, 22 Feb 2024 13:09:06 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1e83a328861efced7dabfb3fb0b629cc
d693807246fd894afe7c71dd98a3b769c5ffea19
b48a6efa5a90a371f03f2739dd24d87629be4bc02e6002573542ff0051dfbd77
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5846
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 22 Feb 2023 13:09:06 GMT
Last-Modified: Wed, 22 Feb 2023 11:31:40 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
asia.adform.net/serving/scripts/trackpoint/async/
301 Moved Permanently 32 kB URL HTTP/2 asia.adform.net/serving/scripts/trackpoint/async/
IP
Hash e3728befb7d4533bb63b07aa4afd0673
476f90ac8208332e3b2b3b0f0da523fd5e1e76c0
e1a3d03ad552a9bc07d6141a7b4fcd5800beef60c102a76492340565eece3014
GET /serving/scripts/trackpoint/async/ HTTP/1.1
Host: asia.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Wed, 22 Feb 2023 13:09:06 GMT
content-type: text/html
location: https://s2.adform.net/banners/scripts/st/trackpoint-async.js
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
my.rtmark.net/p.js?f=sync&lr=1&partner=7547084e3a05b5526b2b977782be8c32cc6b82d5de1f687aa663e4b1ead64804
200 OK 697 B URL HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=7547084e3a05b5526b2b977782be8c32cc6b82d5de1f687aa663e4b1ead64804
IP
Hash bf9e5d59d9f652a8959e1b473af37f50
4e5cc30612c2c0b9da4deaed74d4950a863f07fc
200e90943e900f6ab8e8a98b2d18877c9a735b522f01e6abc06ce474f382a43b
GET /p.js?f=sync&lr=1&partner=7547084e3a05b5526b2b977782be8c32cc6b82d5de1f687aa663e4b1ead64804 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://asia.adform.net/
Cookie: ID=387889da43834a18904c880bf2355291
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Feb 2023 13:09:07 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
pasbstbovc.com/submit.min.js?abvar=
200 OK 0 B URL HTTP/2 pasbstbovc.com/submit.min.js?abvar=
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /submit.min.js?abvar= HTTP/1.1
Host: pasbstbovc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=23022208095de5ce0738484da586fc611635
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Feb 2023 13:09:00 GMT
content-type: application/javascript
last-modified: Tue, 21 Feb 2023 14:08:50 GMT
vary: Accept-Encoding
etag: W/"63f4d072-727b"
x-js-ab: current
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.admixer.net/analytics/tag-manager.js?m=data-from-dom
200 OK 0 B URL HTTP/2 cdn.admixer.net/analytics/tag-manager.js?m=data-from-dom
IP
ASN #58286 Electric-IT Business S.R.L.
GET /analytics/tag-manager.js?m=data-from-dom HTTP/1.1
Host: cdn.admixer.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Cookie: am-uid=4273c88d398043818419c35bd2bb0fff
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 22 Feb 2023 13:09:05 GMT
content-type: application/javascript
last-modified: Thu, 02 Feb 2023 14:35:38 GMT
vary: Accept-Encoding
etag: W/"63dbca3a-710d"
expires: Sun, 04 Feb 2024 09:59:37 GMT
cache-control: max-age=31622400
access-control-expose-headers: content-range
cache: HIT
x-cached-since: 2023-02-03T09:59:38+00:00
x-id: osix-up-gc4
x-nginx: nginx-be
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.admixer.net/analytics/tag-manager.runtime.js
200 OK 0 B URL HTTP/2 cdn.admixer.net/analytics/tag-manager.runtime.js
IP
ASN #58286 Electric-IT Business S.R.L.
GET /analytics/tag-manager.runtime.js HTTP/1.1
Host: cdn.admixer.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Cookie: am-uid=4273c88d398043818419c35bd2bb0fff
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 22 Feb 2023 13:09:05 GMT
content-type: application/javascript
last-modified: Thu, 02 Feb 2023 14:35:38 GMT
vary: Accept-Encoding
etag: W/"63dbca3a-56d"
expires: Sat, 17 Feb 2024 09:46:20 GMT
cache-control: max-age=31622400
access-control-expose-headers: content-range
cache: HIT
x-cached-since: 2023-02-16T09:46:20+00:00
x-id: osix-up-gc4
x-nginx: nginx-be
content-encoding: gzip
X-Firefox-Spdy: h2
wait4min.com/yX5n98X9?source=44528&sub_id_1=pops
302 Found 0 B URL HTTP/2 wait4min.com/yX5n98X9?source=44528&sub_id_1=pops
IP
GET /yX5n98X9?source=44528&sub_id_1=pops HTTP/1.1
Host: wait4min.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Wed, 22 Feb 2023 13:09:00 GMT
content-type: text/html; charset=UTF-8
location: https://pasbstbovc.com/1958161/?var=44528&ymid={clickid}
cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: DYNAMIC
set-cookie: _subid=s8hnpaobfeci;Expires=Saturday, 25-Mar-2023 13:09:00 GMT;Max-Age=2678400;Path=/
bc730=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjUzNjVcIjoxNjc3MDcxMzQwfSxcImNhbXBhaWduc1wiOntcIjUxMFwiOjE2NzcwNzEzNDB9LFwidGltZVwiOjE2NzcwNzEzNDB9In0.SmQ32nyTlheEOwA5g-Zevhi6a-2rhPenSuJ04TkFLqw;Expires=Thursday, 16-Apr-2076 02:18:00 GMT;Max-Age=1677157740;Path=/
_token=uuid_s8hnpaobfeci_s8hnpaobfeci63f613ec4a5f87.13053656;Expires=Saturday, 25-Mar-2023 13:09:00 GMT;Max-Age=2678400;Path=/
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xqGzi5cY5G3mDuNu2oWjkv1l1uKVbv1U7CnIt5KMT%2FhOzgWxCQXsH33H083LslaiGes9qPN%2Bapb69Jdj%2B6r0yxyvzxzn5Q%2B1gDO1i3VwMuI7bwGflSLj08sxk0xKQb0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79d7f4248b37b518-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pasbstbovc.com/?r=dir&zoneid=1958161&var=44528&ymid=clickid&pb=36dcc859435335e188453673f985d8021677078540&psp=O5k8yUFWd3PzrllJNuI7S0zOu_dE39a2NaHqT6OTz0bX146_iD0eVOmWSAmPCaL1fr8l-ggFcSmSM_iEwSYSUlaLu3QHoFMiu4lgIAy6ipD9ZA2-Zt0cvxsndHDj2juD5nnsxX1-4od2kt4O-izBRfjRpbc2X6ASO8oFD2i-iH2AuWCByDRUA-Btvo3-dZ0p7NiwxsDFzMhxZII2R_HqUmnCRTN_I1d-l6FCs5QtAzn88BJuTYsub4O-66VdAiJC5NlF8fz1NeUQM_m1K_f-8G2ppTPk4qvdvPOATnLYgOrD-C80ws_-vELa4Xz-my03NeegyT5xxjbJJmjOoKlmQjZYq_4IFuCekqDL_WRBphkwC7HLY5qDTrnVgKVrg4wJP8opUQakF1VAB98rO4ARWHWuLLTee42ltk8Gmvjn4H8lTSUSeqwotHsqfvo08N1P_ycCzr6nxmFGfyvWU3pay7dCEPnmSMprV4OJeE-JRl0n2w8p84-RHFPY1rTt2Ygf1UQAhZiKyObQhB3GF5ePucgxyKDaxgXGnaLLEOuzGTRMt2tZKNKGTXz3e_wnfpTDTQGTFxN293VR_QFRw0oRRipAlYDmzqSeqWXeAAXnVxHHL0Axnl47D7o3P7PD2yCFNkZT-RTfXCVjbGBtolvmyQHh2kE0PVD81IXESK5vs6K2-3G5sTBULzW_8H3YIqrOYX-XuqTFyIsT&nojs=0&ix=0&abvar=0&febuild=1.0.74&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&0&pload=1066&rlp=%5B0%2C43%2C188%2C162%2C3%2C363%2C61%2C95%5D
200 OK 0 B URL HTTP/2 pasbstbovc.com/?r=dir&zoneid=1958161&var=44528&ymid=clickid&pb=36dcc859435335e188453673f985d8021677078540&psp=O5k8yUFWd3PzrllJNuI7S0zOu_dE39a2NaHqT6OTz0bX146_iD0eVOmWSAmPCaL1fr8l-ggFcSmSM_iEwSYSUlaLu3QHoFMiu4lgIAy6ipD9ZA2-Zt0cvxsndHDj2juD5nnsxX1-4od2kt4O-izBRfjRpbc2X6ASO8oFD2i-iH2AuWCByDRUA-Btvo3-dZ0p7NiwxsDFzMhxZII2R_HqUmnCRTN_I1d-l6FCs5QtAzn88BJuTYsub4O-66VdAiJC5NlF8fz1NeUQM_m1K_f-8G2ppTPk4qvdvPOATnLYgOrD-C80ws_-vELa4Xz-my03NeegyT5xxjbJJmjOoKlmQjZYq_4IFuCekqDL_WRBphkwC7HLY5qDTrnVgKVrg4wJP8opUQakF1VAB98rO4ARWHWuLLTee42ltk8Gmvjn4H8lTSUSeqwotHsqfvo08N1P_ycCzr6nxmFGfyvWU3pay7dCEPnmSMprV4OJeE-JRl0n2w8p84-RHFPY1rTt2Ygf1UQAhZiKyObQhB3GF5ePucgxyKDaxgXGnaLLEOuzGTRMt2tZKNKGTXz3e_wnfpTDTQGTFxN293VR_QFRw0oRRipAlYDmzqSeqWXeAAXnVxHHL0Axnl47D7o3P7PD2yCFNkZT-RTfXCVjbGBtolvmyQHh2kE0PVD81IXESK5vs6K2-3G5sTBULzW_8H3YIqrOYX-XuqTFyIsT&nojs=0&ix=0&abvar=0&febuild=1.0.74&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&0&pload=1066&rlp=%5B0%2C43%2C188%2C162%2C3%2C363%2C61%2C95%5D
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /?r=dir&zoneid=1958161&var=44528&ymid=clickid&pb=36dcc859435335e188453673f985d8021677078540&psp=O5k8yUFWd3PzrllJNuI7S0zOu_dE39a2NaHqT6OTz0bX146_iD0eVOmWSAmPCaL1fr8l-ggFcSmSM_iEwSYSUlaLu3QHoFMiu4lgIAy6ipD9ZA2-Zt0cvxsndHDj2juD5nnsxX1-4od2kt4O-izBRfjRpbc2X6ASO8oFD2i-iH2AuWCByDRUA-Btvo3-dZ0p7NiwxsDFzMhxZII2R_HqUmnCRTN_I1d-l6FCs5QtAzn88BJuTYsub4O-66VdAiJC5NlF8fz1NeUQM_m1K_f-8G2ppTPk4qvdvPOATnLYgOrD-C80ws_-vELa4Xz-my03NeegyT5xxjbJJmjOoKlmQjZYq_4IFuCekqDL_WRBphkwC7HLY5qDTrnVgKVrg4wJP8opUQakF1VAB98rO4ARWHWuLLTee42ltk8Gmvjn4H8lTSUSeqwotHsqfvo08N1P_ycCzr6nxmFGfyvWU3pay7dCEPnmSMprV4OJeE-JRl0n2w8p84-RHFPY1rTt2Ygf1UQAhZiKyObQhB3GF5ePucgxyKDaxgXGnaLLEOuzGTRMt2tZKNKGTXz3e_wnfpTDTQGTFxN293VR_QFRw0oRRipAlYDmzqSeqWXeAAXnVxHHL0Axnl47D7o3P7PD2yCFNkZT-RTfXCVjbGBtolvmyQHh2kE0PVD81IXESK5vs6K2-3G5sTBULzW_8H3YIqrOYX-XuqTFyIsT&nojs=0&ix=0&abvar=0&febuild=1.0.74&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&0&pload=1066&rlp=%5B0%2C43%2C188%2C162%2C3%2C363%2C61%2C95%5D HTTP/1.1
Host: pasbstbovc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=23022208095de5ce0738484da586fc611635
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Feb 2023 13:09:00 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-route-id: redirect.dl
set-cookie: OACCAP=ACUpeQAAAAAAAAAB; Path=/; Expires=Fri, 24 Mar 2023 13:09:00 GMT; Secure; SameSite=None
OACBLOCK=ACUpeQAAAABj9aFQ; Path=/; Expires=Fri, 24 Mar 2023 13:09:00 GMT; Secure; SameSite=None
OXCCLK=ACUpeQAAAAAAAAAB; Path=/; Expires=Thu, 23 Feb 2023 13:09:00 GMT; Secure; SameSite=None
OXPCLK=AAJN7wAAAAAAAAAB; Path=/; Expires=Thu, 23 Feb 2023 13:09:00 GMT; Secure; SameSite=None
ppucnt=1; Path=/; Expires=Thu, 23 Feb 2023 13:09:00 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/line-awesome/css/line-awesome.min.css
200 OK 0 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/vendor/line-awesome/css/line-awesome.min.css
IP
GET /wp-content/themes/Divi-child/vendor/line-awesome/css/line-awesome.min.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:03 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:44 GMT
ETag: W/"4334c8c70998d81bde3e6765828811a6"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: WjffsI30GwSkR8UW33_7mP643_Zp4VjcGw7kEWrqGmKZo_Y0qsRZaA==
Age: 45600
d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/css/datepicker.min.css
200 OK 0 B URL HTTP/1.1 d3uayxmzbnco7f.cloudfront.net/wp-content/themes/Divi-child/css/datepicker.min.css
IP
GET /wp-content/themes/Divi-child/css/datepicker.min.css HTTP/1.1
Host: d3uayxmzbnco7f.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 22 Feb 2023 00:29:04 GMT
Last-Modified: Tue, 27 Aug 2019 08:27:32 GMT
ETag: W/"b0a281fe72f3c339274f6b9697a04f4e"
Cache-Control: 2592000
Server: AmazonS3
Content-Encoding: gzip
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lUs3FkqZG7Fuff5x5ByaFj9_ia1W_2Dchxtj1KNC1_McaUSqhRQLmQ==
Age: 45601
asia.adform.net/serving/container/?pm=1828276&lid=60416094&ctype=0&media=0&PageName=ROS&rnd=1902159083&cpref=&loc=https%3a%2f%2fwww.lyca-mobile.no%2fnb%2fbundle%2flyca-smart-l%2f%3futm_source%3dSelectivv%26utm_medium%3dbanner%26utm_campaign%3dCNOR4001CAO0223HNL1PRGDUT%26utm_term%3dP5%26user_id%3d63f613eef8d65f0001b92a0c%26cmpid%3d637fb0f9010e700001e597f3%26rtkcid%3d63f613eef8d65f0001b92a0c
200 OK 0 B URL HTTP/2 asia.adform.net/serving/container/?pm=1828276&lid=60416094&ctype=0&media=0&PageName=ROS&rnd=1902159083&cpref=&loc=https%3a%2f%2fwww.lyca-mobile.no%2fnb%2fbundle%2flyca-smart-l%2f%3futm_source%3dSelectivv%26utm_medium%3dbanner%26utm_campaign%3dCNOR4001CAO0223HNL1PRGDUT%26utm_term%3dP5%26user_id%3d63f613eef8d65f0001b92a0c%26cmpid%3d637fb0f9010e700001e597f3%26rtkcid%3d63f613eef8d65f0001b92a0c
IP
GET /serving/container/?pm=1828276&lid=60416094&ctype=0&media=0&PageName=ROS&rnd=1902159083&cpref=&loc=https%3a%2f%2fwww.lyca-mobile.no%2fnb%2fbundle%2flyca-smart-l%2f%3futm_source%3dSelectivv%26utm_medium%3dbanner%26utm_campaign%3dCNOR4001CAO0223HNL1PRGDUT%26utm_term%3dP5%26user_id%3d63f613eef8d65f0001b92a0c%26cmpid%3d637fb0f9010e700001e597f3%26rtkcid%3d63f613eef8d65f0001b92a0c HTTP/1.1
Host: asia.adform.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.lyca-mobile.no/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Feb 2023 13:09:07 GMT
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, must-revalidate, no-transform
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: *
p3p: CP="NOI DSP COR NID CURa ADMa DEVa TAIa PSAa PSDa OUR LEG NAV INT"
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
pasbstbovc.com/1958161/?var=44528&ymid={clickid}
200 OK 0 B URL HTTP/2 pasbstbovc.com/1958161/?var=44528&ymid={clickid}
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /1958161/?var=44528&ymid={clickid} HTTP/1.1
Host: pasbstbovc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Wed, 22 Feb 2023 13:09:00 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-route-id: check.sumbit.dl
set-cookie: UID=23022208095de5ce0738484da586fc611635; Path=/; Expires=Thu, 22 Feb 2024 13:09:00 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
172.64.198.22
23.36.76.226
62.122.171.6
52.95.142.77
52.219.47.167
104.17.25.14
151.101.84.157
157.240.200.14
52.208.136.62
185.244.209.62
15.236.125.10